[80233] in North American Network Operators' Group
Re: Port 25 - Blacklash
daemon@ATHENA.MIT.EDU (Suresh Ramasubramanian)
Wed Apr 27 13:44:54 2005
Date: Wed, 27 Apr 2005 23:14:25 +0530
From: Suresh Ramasubramanian <ops.lists@gmail.com>
Reply-To: Suresh Ramasubramanian <ops.lists@gmail.com>
To: "Valdis.Kletnieks@vt.edu" <Valdis.Kletnieks@vt.edu>
Cc: Joel Jaeggli <joelja@darkwing.uoregon.edu>,
Daniel Golding <dgolding@burtongroup.com>,
Hank Nussbacher <hank@mail.iucc.ac.il>,
Adam Jacob Muller <adam@gotlinux.us>,
Nanog Mailing list <nanog@merit.edu>
In-Reply-To: <200504271645.j3RGjW0e015113@turing-police.cc.vt.edu>
Errors-To: owner-nanog@merit.edu
On 4/27/05, Valdis.Kletnieks@vt.edu <Valdis.Kletnieks@vt.edu> wrote:
>=20
> Of course, the same ISPs that will use the ID in the email headers are,
> by and large, the same ones that already know how to match the IP in the
> headers to their radius/tacacs/etc logs....
>=20
With a great deal less effort.
When you are trying to speed up processing of this sort, the less
effort wasted and less time taken nailing down one trojaned box the
better
--=20
Suresh Ramasubramanian (ops.lists@gmail.com)