Re: DNS Hijacking by Cox

[Sean Donelan <sean () donelan com>]

On Tue, 24 Jul 2007, Perry Lorier wrote:
> doing it[1].  If you're interested in finding people that Undernet detects as 
> being open proxies or such like, put an IDS rule looking for ":[^ ]* 465 [^ 
> ]* :AUTO ".

Of course, then someone would flame the ISP for running a sniffer/wiretap 
on their network.

ISPs are pretty much damned no matter what they do or don't do.