nanog mailing list archives

Re: What *are* they smoking?


From: Richard A Steenbergen <ras () e-gerbil net>
Date: Mon, 15 Sep 2003 19:15:29 -0400


On Tue, Sep 16, 2003 at 12:56:57AM +0200, Niels Bakker wrote:

A wildcard A record in the net TLD.

$ host does.really-not-exist.net
does.really-not-exist.net has address 64.94.110.11

$ host 64.94.110.11
11.110.94.64.IN-ADDR.ARPA domain name pointer sitefinder-idn.verisign.com

It even responds on port 25 (says 550 on every RCPT TO).  Gah.

I would say time to null route this horribly inappropriate scam, but it 
looks like a few cable modem providers have already done so, and I am no 
longer seeing it in the .com zone (but I still see it under .net).

-- 
Richard A Steenbergen <ras () e-gerbil net>       http://www.e-gerbil.net/ras
GPG Key ID: 0xF8B12CBC (7535 7F59 8204 ED1F CC1C 53AF 4C41 5ECA F8B1 2CBC)


Current thread: