Bugtraq mailing list archives

Re: spamblocker turns into mail denial of service


From: Chris Fuhrman <chris.fuhrman () tfcci com>
Date: Mon, 15 Mar 2004 12:45:29 -0500

Howdy,

The Monkeys.com blacklist was officially retired 9/22 due to repeated
DDoS attacks on it's main servers.

Please see http://www.dnsbl.info/forums/topic.asp?TOPIC_ID=12 for the
official closing announcement from Ron Guilmette.

Cheers!

On Mon, 2004-03-15 at 11:21, Dana Hudes wrote:
At some point in the last 24 hours the dns-based blackhole list
proxies.relays.monkies.com turned into a deny-all-mail: the A record
for the blackhole list is now 127.0.0.2 which means all mail is rejected.
Anyone who knows anyone who was using this should immediately remove
it. I do not know why the folks at infinite monkeys would do this nasty
thing, perhaps it was done by a spammer hacking in.

Certainly it points out that all such services should be using DNSSEC
and that perhaps that's not enough if the name server is hacked.
-- 
Chris Fuhrman           | Twenty First Century Communications
chris.fuhrman () tfcci com | Senior Software Engineer
(W) 614-442-1215 x271   |
(F) 614-442-5662        | PGP/GPG Public Key Available on Request

Attachment: signature.asc
Description: This is a digitally signed message part


Current thread: