[90769] in North American Network Operators' Group
Re: Interesting new spam technique - getting a lot more popular.
daemon@ATHENA.MIT.EDU (Christopher L. Morrow)
Wed Jun 14 00:13:37 2006
Date: Wed, 14 Jun 2006 04:10:51 +0000 (GMT)
From: "Christopher L. Morrow" <christopher.morrow@verizonbusiness.com>
In-reply-to: <bb0e440a0606132103vc91b32y5feb322a36ac149@mail.gmail.com>
To: Suresh Ramasubramanian <ops.lists@gmail.com>
Cc: NANOG <nanog@merit.edu>
Errors-To: owner-nanog@merit.edu
On Wed, 14 Jun 2006, Suresh Ramasubramanian wrote:
>
> http://thespamdiaries.blogspot.com/2006/02/new-host-cloaking-technique-used-by.html
>
> * Monitor your local network for interfaces transmitting ARP
> responses they shouldn't be.
how about just mac security on switch ports? limit the number of mac's at
each port to 1 or some number 'valid' ?