[65808] in North American Network Operators' Group
Re: Anyone from NeuLeve.bizl listening?
daemon@ATHENA.MIT.EDU (Suresh Ramasubramanian)
Thu Dec 11 10:16:11 2003
Date: Thu, 11 Dec 2003 10:14:36 -0500
From: Suresh Ramasubramanian <suresh@outblaze.com>
To: Drew Linsalata <drew@gothambus.com>
Cc: nanog@merit.edu
In-Reply-To: <3FD88747.70709@gothambus.com>
Errors-To: owner-nanog-outgoing@merit.edu
Drew Linsalata writes on 12/11/2003 10:03 AM:
> If anyone has real contact info for these folks, or anyone from NeuLevel
> is listening, please drop me a note off-list. A cracker/spammer has
> decided to list one of our customer servers as a secondary nameserver
> for a bunch of spam domains and we're getting hammered with spam
> complaints that really have nothing to with us.
For now - I'd suggest that you make that server authoritative for all
the spammer domains pointing at it, and set their MX and A records to
127.0.0.1 with a really long TTL (like a year or two). And set up a
website on that host saying "this is a forgery, it is not us"
srs
--
srs (postmaster|suresh)@outblaze.com // gpg : EDEDEFB9
manager, outblaze.com security and antispam operations
