On 16 Jan 2007, at 17:36, Wes Hardaker wrote:
A number of ISPs use njabl.org as a DNS BL server. However, starting
jan 2 a new domain exists "njalb.org" which is serving A records for
anything queried against it's DNS server.
This is a common problem affecting Spamhaus and others as well;
domain squatters register every variation of our domains and place
wildcard DNS on them. We get quite a few complaints from users that
we're blocking them and when investigated we find some postmaster has
fat-fingered an entry in his spam filter and instead of
"spamhaus.org" has entered a domain squatter's variation, such as one
of these:
;; Query: 1.2.3.4.spamhuas.org ,type = ANY , class = ANY
^^
;; ANSWERS:
1.2.3.4.spamhuas.org 3600 IN A 64.20.49.210
1.2.3.4.spamhuas.org 3600 IN A 64.20.33.115
1.2.3.4.spamhuas.org 3600 IN A 64.20.33.131
1.2.3.4.spamhuas.org 3600 IN A 64.20.33.4
;; Query: 1.2.3.4.spamhauz.org ,type = ANY , class = ANY
^
;; ANSWERS:
1.2.3.4.spamhauz.org 3600 IN A 64.20.33.131
1.2.3.4.spamhauz.org 3600 IN A 64.20.49.210
1.2.3.4.spamhauz.org 3600 IN A 64.20.33.4
1.2.3.4.spamhauz.org 3600 IN A 64.20.33.115
Steve Linford
The Spamhaus Project
http://www.spamhaus.org
