That's what I mistakenly thought, at first. However, nothing will ever
connect to your server with the IP address of 64.94.110.11, so you should
never have the opportunity to resolve the IP to a name. Rather, they will
connect with a bogus hostname or mail domain, and the forward lookup ("A"
record) will resolve to 64.94.110.11.
At least bogus domain MX records are not resolving to this VeriSlime
address.
Bill
----- Original Message -----
From: "Joshua Levitsky" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Monday, September 15, 2003 8:36 PM
Subject: Re: [Declude.JunkMail] Change to .com/.net behavior
>
> On Sep 15, 2003, at 11:11 PM, wayne wrote:
>
> >
> > In <[EMAIL PROTECTED]> Matt Larson
> > <[EMAIL PROTECTED]> writes:
> >
> >> Today VeriSign is adding a wildcard A record to the .com and .net
> >> zones. The wildcard record in the .net zone was activated from
> >> 10:45AM EDT to 13:30PM EDT. The wildcard record in the .com zone is
> >> being added now.
> >
> > Well, I hope you have the worlds most secure server running on this IP
> > address as it is going to be a prime target for crackers.
> >
> > And, just to give you some idea how carefully VeriSlim considered this
> > aspect, I saw this link on /.
> >
> > http://sitefinder.verisign.com/lpc?url='%3E%3Ch1%3Ehi%20mom%3C/h1%3E
> >
>
> ;; ANSWER SECTION:
> 11.110.94.64.in-addr.arpa. 900 IN PTR
> sitefinder-idn.verisign.com.
>
> I was thinking that if email came from a bogus domain that when I look
> up the PTR on my email server, if it is sitefinder-idn.verisign.com
> then could I block that mail and never be blocking legitimate mail?
>
> -Josh
>
> ---
> [This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]
>
> ---
> This E-mail came from the Declude.JunkMail mailing list. To
> unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
> type "unsubscribe Declude.JunkMail". The archives can be found
> at http://www.mail-archive.com.
>
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail". The archives can be found
at http://www.mail-archive.com.
