Full Disclosure mailing list archives
Re: Mydoom: Perfect Storm Averted or Just Ahead?
From: "Collin R. Mulliner" <collin () betaversion net>
Date: Thu, 29 Jan 2004 14:48:12 +0100
Hi,
That'd be an interesting defense. Has anyone tried renaming their incoming MX machine so that it includes one of these strings?
I think all email addresses which contain the unwanted strings are filtered out before asking for the mx host for a specific domain - so this defense wont work. Everything else would be to slow. ... Collin -- Collin Mulliner <collin () betaversion net> BATAVERSiON Systems [www.betaversion.net] fom: To know recursion, you must first know recursion. _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.netsys.com/full-disclosure-charter.html
Current thread:
- Mydoom: Perfect Storm Averted or Just Ahead? WolfgangK (Jan 28)
- Re: Mydoom: Perfect Storm Averted or Just Ahead? Randal L. Schwartz (Jan 29)
- Re: Mydoom: Perfect Storm Averted or Just Ahead? Collin R. Mulliner (Jan 29)
- Re: Mydoom: Perfect Storm Averted or Just Ahead? Papp Geza (Jan 29)
- <Possible follow-ups>
- Mydoom: perfect storm averted or just ahead? Computer Security (Jan 29)
- Re: Mydoom: perfect storm averted or just ahead? Roelof Temmingh (Jan 29)
- Re: Mydoom: Perfect Storm Averted or Just Ahead? Randal L. Schwartz (Jan 29)