nanog mailing list archives
Re: UUNet contact for security spambot?
From: Suresh Ramasubramanian <suresh () outblaze com>
Date: Mon, 05 Jan 2004 22:21:18 +0530
Jay Hennigan [1/5/2004 10:14 PM] :
Mail comes from "secmbox3 () uu net" with a return path of "eagleeye () uu net".
I'm getting these too, because whoever it is has been a bit too clever for his own good.
Like - the ARIN contact for a netblock is foo () email com, where email.com is a freemail service that we run.
This genius at uunet takes the foo () email com, determines that email.com admins can be best reached at postmaster () email com, and sends us reports about an IP that we have zero control over.
Totally dumb, of course ... but luckily not at the sort of volume that is generated by zone alarm type GWF [1] software.
srs [1] Goober With Firewall -- srs (postmaster|suresh)@outblaze.com // gpg : EDEDEFB9 manager, outblaze.com security and antispam operations
Current thread:
- UUNet contact for security spambot? Jay Hennigan (Jan 05)
- Re: UUNet contact for security spambot? Suresh Ramasubramanian (Jan 05)
- Re: UUNet contact for security spambot? Christopher L. Morrow (Jan 05)