Re: DNS Blackhole attack

2005-03-07 Thread Ketil Froyn
yourself. Try my poison yourself page here: http://ketil.froyn.name/poison.html It tries to redirect www.example.com to a fake IP (the same one as I host my website on), where I have a virtualhost for www.example.com with a plain html page. It'll tell you if you were poisoned. Cheers, Ketil Froyn

Re: SMTP Port Blocking: Success or Failure?

2005-02-27 Thread Ketil Froyn
Quoting Claydon, Tom [EMAIL PROTECTED]: We are considering filtering outbound SMTP traffic from our ISP customers, except from our own mail servers, to help reduce the amount of spam originating from our network. How successful/unsucessful has implementing outbound SMTP filtering done in

Re: Collecting PTR names or IP addresses (Was: Re: IRC Bot list (crossposting))

2005-02-14 Thread Ketil Froyn
On Mon, 2005-02-14 at 11:29 +0200, Gadi Evron wrote: Isn't it a good idea to collect the IP addresses rather than the ptr name? For instance, if I were an evil person in control of the ptr record of my own IP, I could easily make the name something like 1-2-3-4.dsl.verizon.net, and if

Collecting PTR names or IP addresses (Was: Re: IRC Bot list (cross posting))

2005-02-11 Thread Ketil Froyn
http://www.albany.edu/~ja6447/hacked_bots8.txt Isn't it a good idea to collect the IP addresses rather than the ptr name? For instance, if I were an evil person in control of the ptr record of my own IP, I could easily make the name something like 1-2-3-4.dsl.verizon.net, and if you didn't