[Exim] Interesting twist on that Verisign business

Top Page
Delete this message
Reply to this message
Author: David Stone
Date:  
To: exim-users
Subject: [Exim] Interesting twist on that Verisign business
Having recently waded through all the list emails about verisign's
new wildcard handling, I sat up a little when I ran across the
following in one of those interminable "viagra" spams:

    a href="http:/internet-generic-pharmacy.com/remove/"


I missed the missing // at first, and looked up the IP address:

host internet-generic-pharmacy.com
internet-generic-pharmacy.com has address 64.94.110.11

[whois.arin.net]
Internap Network Services PNAP-05-2000 (NET-64-94-0-0-1)
                                  64.94.0.0 - 64.95.255.255
VeriSign/Network Solutions PNAP-LAX-VERISI-RM-13 (NET-64-94-110-0-1)
                                  64.94.110.0 - 64.94.110.255


So one consequence of Verisign's action is that they're likely to
get a ton of complaints about them hosting spammer's websites when
said websites don't actually exist.

Someone in that _long_ thread asked how long it would take that
IP address to get listed:

    blackholes.easynet.nl: (127.0.0.2)


- apparently, not that long! Tomorrow I'll be working on the
various hints/suggestions that came up in that thread. Thanks
to all the contributors!

Cheers,

Dave Stone