http://issues.apache.org/SpamAssassin/show_bug.cgi?id=5777





------- Additional Comments From [EMAIL PROTECTED]  2008-01-11 01:03 -------
(In reply to comment #6)
> (In reply to comment #5)
> > (In reply to comment #4)
> > > the impact is not much larger if ppl are querying for googlepages or
> > > blah.googlepages.com.
> > 
> > Nameserver caching of (many_names_here).googlepages.com versus domain.com
may be rather different.
> 
> It amounts to a potentially immediate and trivial DDOS attack against the
public nameservers, limited mainly by how many subdomain sites can be
automatically set up by botnets.  That number is large.

Jeff --

on this point -- does it make a difference to the querier's DNS cache,
whether the domain or subdomain exists or not?  In other words, a spammer
can equally launch this attack by filling a spam with foo1.com, foo2.com, ...
foo99999.com.  They don't even have to register those domains -- the effect
on the DNSBL's server will be the same.



------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.

Reply via email to