[62034] in North American Network Operators' Group
Re: What *are* they smoking?
daemon@ATHENA.MIT.EDU (Richard A Steenbergen)
Mon Sep 15 19:17:20 2003
Date: Mon, 15 Sep 2003 19:15:29 -0400
From: Richard A Steenbergen <ras@e-gerbil.net>
To: nanog@merit.edu
In-Reply-To: <20030915225656.GM99725@snowcrash.tpb.net>
Errors-To: owner-nanog-outgoing@merit.edu
On Tue, Sep 16, 2003 at 12:56:57AM +0200, Niels Bakker wrote:
>
> A wildcard A record in the net TLD.
>
> $ host does.really-not-exist.net
> does.really-not-exist.net has address 64.94.110.11
>
> $ host 64.94.110.11
> 11.110.94.64.IN-ADDR.ARPA domain name pointer sitefinder-idn.verisign.com
>
> It even responds on port 25 (says 550 on every RCPT TO). Gah.
I would say time to null route this horribly inappropriate scam, but it
looks like a few cable modem providers have already done so, and I am no
longer seeing it in the .com zone (but I still see it under .net).
--
Richard A Steenbergen <ras@e-gerbil.net> http://www.e-gerbil.net/ras
GPG Key ID: 0xF8B12CBC (7535 7F59 8204 ED1F CC1C 53AF 4C41 5ECA F8B1 2CBC)
