Re: What *are* they smoking?

["Matthew S. Hallacy" <poptix () techmonkeys org>]

On Tue, Sep 16, 2003 at 01:18:26AM +0200, Jeroen Massar wrote:
> Even worse of this is that you can't verify domain names under .net
> any more for 'existence' as every .net domain suddenly has a A record
> and then can be used for spamming...
>
> From: Spammer <i () spam using verisign eventhoughthisdomaindoesntexist net>
> To: You <spamtarget () example com>
>
> Thank you Verisign! Now we need to check for existence of an MX
> and then just break a couple of RFC's in the process :(

Checking for NS or SOA record(s) is sufficient, neither are being returned,
only A records.

Of course, you could just block anything that resolves to netsol.

-- 
Matthew S. Hallacy                            FUBAR, LART, BOFH Certified
http://www.poptix.net                           GPG public key 0x01938203

Attachment: _bin
Description: