[66233] in North American Network Operators' Group
Re: UUNet contact for security spambot?
daemon@ATHENA.MIT.EDU (Suresh Ramasubramanian)
Mon Jan 5 11:52:59 2004
Date: Mon, 05 Jan 2004 22:21:18 +0530
From: Suresh Ramasubramanian <suresh@outblaze.com>
To: Jay Hennigan <jay@west.net>
Cc: nanog@merit.edu
In-Reply-To: <Pine.LNX.4.58.0401050836350.825@ohtf.fo.jrfg.arg>
Errors-To: owner-nanog-outgoing@merit.edu
Jay Hennigan [1/5/2004 10:14 PM] :
> Mail comes from "secmbox3@uu.net" with a return path of "eagleeye@uu.net".
I'm getting these too, because whoever it is has been a bit too clever
for his own good.
Like - the ARIN contact for a netblock is foo@email.com, where email.com
is a freemail service that we run.
This genius at uunet takes the foo@email.com, determines that email.com
admins can be best reached at postmaster@email.com, and sends us reports
about an IP that we have zero control over.
Totally dumb, of course ... but luckily not at the sort of volume that
is generated by zone alarm type GWF [1] software.
srs
[1] Goober With Firewall
--
srs (postmaster|suresh)@outblaze.com // gpg : EDEDEFB9
manager, outblaze.com security and antispam operations
