On 25 Aug 2001, at 17:03, Norbert Bollow wrote:
> > what, if anything, should an ISP do when get a bunch of relay-attempts
> > from some other ISP? Of course, they're all 'relaying denied' but it
> > feels like sort of a poor-man's stupid mini-DoS attack.
> [..]
> > Any suggestions?
>
> Have you checked the MX records for those domains? (Maybe the
> mailservers of those other ISPs just act according to some broken MX
> records?)
Yeah, and we've even sent complaints to 'abuse@...' for the relevant
domains. All to no avail [For example, the offending sites include aol
and pacbell [this extracted and compacted from our mail log for
yesterday. The first number is the number of 'denials' we made from
the given IP addr]:
Relaying denied
1979 AC944F35.ipt.aol.com [172.148.79.53]
1660 ACA467AE.ipt.aol.com [172.164.103.174]
1690 ppp-207-215-149-211.sndg02.pacbell.net [207.215.149.211]
1687 ppp-207-104-100-247.sndg02.pacbell.net [207.104.100.247]
/Bernie\
--
Bernie Cosell Fantasy Farm Fibers
mailto:[EMAIL PROTECTED] Pearisburg, VA
--> Too many people, too few sheep <--
