[66829] in North American Network Operators' Group
in case nobody else noticed it, there was a mail worm released today
daemon@ATHENA.MIT.EDU (Paul Vixie)
Mon Jan 26 20:52:51 2004
From: Paul Vixie <paul@vix.com>
To: nanog@merit.edu
Date: Tue, 27 Jan 2004 01:52:11 +0000
Errors-To: owner-nanog-outgoing@merit.edu
my copies (500 or so, before i filtered) are in a ~7MB gzip'd mailbox file
called http://sa.vix.com/~vixie/mailworm.mbox.gz (plz don't fetch that unless
you need it for comparison or analysis). there's a high degree of splay in
the smtp/tcp peer address, and the sender is prepared to try backup MX's if
the primary rejects it, though it appears to try the MX's in priority order.
