[53741] in North American Network Operators' Group
Re: Weird distributed spam attack
daemon@ATHENA.MIT.EDU (Chip Rosenthal)
Fri Nov 22 15:49:47 2002
Date: Fri, 22 Nov 2002 14:45:25 -0600
From: Chip Rosenthal <chip@unicom.com>
To: nanog@merit.edu
Mail-Followup-To: nanog@merit.edu
In-Reply-To: <01KP33RP58VM8WWVU4@OREGON.UOREGON.EDU>
Errors-To: owner-nanog-outgoing@merit.edu
On Wed, Nov 20, 2002 at 09:40:50AM -0800, Joe St Sauver wrote:
> In addition to thousands of open relays, which are bad enough in
> their own right, there are also thousands of open proxy servers
> which a growing number of spammers have been using to launch spam
> runs lately. I suspect that's what you're seeing.
I agree--that's a strong possibility.
This week, I released a tool to test open proxies.
<http://www.unicom.com/sw/pxytest>
> [I will also say that it would really be great if mail-abuse.org would
> add an open proxy listing project to complement their RSS, DUL, and
> other initiatives.]
I believe RBL will list open proxies.
Another good resource is the Blitzed Open Proxy Monitor (BOPM)
<http://www.blitzed.org/bopm/>.
--
Chip Rosenthal * chip@unicom.com * http://www.unicom.com/
Lawsuit Update: I Win, Domain Hijackers Lose * http://save.unicom.com/
