Re: DNS tomfoolery
On 17.04.06 09:48, Edward Speyer wrote:
> BIND keeps moaning at me about "Bogus MULTICAST A" resource records. I
> see that they are all as a result of queries to domains that host
> websites trying to sell Viagra / Cialis etc. (probably initiated by
> SpamAssassin).
>
> Does anyone have any ideas as to the incentive for spam-loving
> faux-Viagra vendors to use a multicast IP address for their nameservers?
use whois to find contact info.
> ;; AUTHORITY SECTION:
> seescum.biz. 600 IN NS ns3.seescum.biz.
>
> ;; ADDITIONAL SECTION:
> mail.seescum.biz. 600 IN A 238.222.241.159
> ns3.seescum.biz. 600 IN A 238.222.241.159
>
> Note that the "mail" and "ns3" RRs are in the multicast IP address
> space! I'm suspicious!
submit them to 'bogusmx' list at rfc-ignorant.org and badconf at sorbs.net
--
Matus UHLAR - fantomas, uhlar@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
Remember half the people you know are below average.
Reply to: