[63682] in North American Network Operators' Group
Re: Wired mag article on spammers playing traceroute games with
daemon@ATHENA.MIT.EDU (Suresh Ramasubramanian)
Thu Oct 9 12:41:27 2003
Date: Thu, 09 Oct 2003 21:59:35 +0530
From: Suresh Ramasubramanian <suresh@outblaze.com>
To: Vinny Abello <vinny@tellurian.com>
Cc: Chris Boyd <cboyd@gizmopartners.com>, nanog@merit.edu
In-Reply-To: <6.0.0.22.2.20031009120243.02e24808@mail1.tellurian.com>
Errors-To: owner-nanog-outgoing@merit.edu
Vinny Abello writes on 10/9/2003 9:41 PM:
> They're using extremely low TTL's on most of their records. Typically 2
> minutes to accomplish this. The thing is I would imagine at least ONE of
> those NS servers cannot change within a 2 hour window whereas the others
They are using a whole lot of stuff that's basically dynamic DNS.
> low TTL on an NS record. If NeuLevel is any good they would likely have
> some sort of information to identify the owner of the domain, even if
They seem to have a spammer infestation though.
srs
--
srs (postmaster|suresh)@outblaze.com // gpg : EDEDEFB9
manager, outblaze.com security and antispam operations