[90799] in North American Network Operators' Group
RE: Interesting new spam technique - getting a lot more popular.
daemon@ATHENA.MIT.EDU (Christopher L. Morrow)
Wed Jun 14 15:39:58 2006
Date: Wed, 14 Jun 2006 19:39:30 +0000 (GMT)
From: "Christopher L. Morrow" <christopher.morrow@verizonbusiness.com>
In-reply-to: <B6621ED4D0AD394BBA73CA657DFD8976D508F5@MSPEXBE01.wamnet.inc>
To: "Church, Chuck" <cchurch@netcogov.com>
Cc: NANOG <nanog@merit.edu>
Errors-To: owner-nanog@merit.edu
On Wed, 14 Jun 2006, Church, Chuck wrote:
>
> Since this technique requires a IPinIP or GRE tunnel, wouldn't blocking
> these two protocols to/from the hosts be sufficient? Assuming of course
> the customer's host isn't using that normally.
sure, but those are probably just convenience things, what happens when
they setup an ssl tunnel? or http tunnel or ping tunnel?