I wouldn't collect the contents of an A record, if that's what you mean.
I meant that it would be better to collect the IP of whoever is
connected to the irc server directly, eliminating the entire, possibly
misleading, step of DNS lookups. Faking that IP is more difficult.
Agreed.
I always store
On Mon, 14 Feb 2005 12:50:17 +, Ketil Froyn <[EMAIL PROTECTED]> wrote:
> On Mon, 2005-02-14 at 11:29 +0200, Gadi Evron wrote:
> > > Isn't it a good idea to collect the IP addresses rather than the ptr
> > > name? For instance, if I were an evil person in control of the ptr
> > > record of my o
On Mon, 2005-02-14 at 11:29 +0200, Gadi Evron wrote:
>
> > Isn't it a good idea to collect the IP addresses rather than the ptr
> > name? For instance, if I were an evil person in control of the ptr
> > record of my own IP, I could easily make the name something like
> > 1-2-3-4.dsl.verizon.net,
Ketil Froyn wrote:
http://www.albany.edu/~ja6447/hacked_bots8.txt
Isn't it a good idea to collect the IP addresses rather than the ptr
name? For instance, if I were an evil person in control of the ptr
record of my own IP, I could easily make the name something like
1-2-3-4.dsl.verizon.net, and if