Re: [Declude.JunkMail] Change to .com/.net behavior

2003-09-15 Thread Joshua Levitsky
On Sep 15, 2003, at 11:11 PM, wayne wrote:

In [EMAIL PROTECTED] Matt Larson 
[EMAIL PROTECTED] writes:

Today VeriSign is adding a wildcard A record to the .com and .net
zones.  The wildcard record in the .net zone was activated from
10:45AM EDT to 13:30PM EDT.  The wildcard record in the .com zone is
being added now.
Well, I hope you have the worlds most secure server running on this IP
address as it is going to be a prime target for crackers.
And, just to give you some idea how carefully VeriSlim considered this
aspect, I saw this link on /.
http://sitefinder.verisign.com/lpc?url='%3E%3Ch1%3Ehi%20mom%3C/h1%3E

;; ANSWER SECTION:
11.110.94.64.in-addr.arpa. 900  IN  PTR 
sitefinder-idn.verisign.com.

I was thinking that if email came from a bogus domain that when I look 
up the PTR on my email server, if it is sitefinder-idn.verisign.com 
then could I block that mail and never be blocking legitimate mail?

-Josh

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


Re: [Declude.JunkMail] Change to .com/.net behavior

2003-09-15 Thread Bill Landry
That's what I mistakenly thought, at first.  However, nothing will ever
connect to your server with the IP address of 64.94.110.11, so you should
never have the opportunity to resolve the IP to a name.  Rather, they will
connect with a bogus hostname or mail domain, and the forward lookup (A
record) will resolve to 64.94.110.11.

At least bogus domain MX records are not resolving to this VeriSlime
address.

Bill
- Original Message - 
From: Joshua Levitsky [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Monday, September 15, 2003 8:36 PM
Subject: Re: [Declude.JunkMail] Change to .com/.net behavior



 On Sep 15, 2003, at 11:11 PM, wayne wrote:

 
  In [EMAIL PROTECTED] Matt Larson
  [EMAIL PROTECTED] writes:
 
  Today VeriSign is adding a wildcard A record to the .com and .net
  zones.  The wildcard record in the .net zone was activated from
  10:45AM EDT to 13:30PM EDT.  The wildcard record in the .com zone is
  being added now.
 
  Well, I hope you have the worlds most secure server running on this IP
  address as it is going to be a prime target for crackers.
 
  And, just to give you some idea how carefully VeriSlim considered this
  aspect, I saw this link on /.
 
  http://sitefinder.verisign.com/lpc?url='%3E%3Ch1%3Ehi%20mom%3C/h1%3E
 

 ;; ANSWER SECTION:
 11.110.94.64.in-addr.arpa. 900  IN  PTR
 sitefinder-idn.verisign.com.

 I was thinking that if email came from a bogus domain that when I look
 up the PTR on my email server, if it is sitefinder-idn.verisign.com
 then could I block that mail and never be blocking legitimate mail?

 -Josh

 ---
 [This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

 ---
 This E-mail came from the Declude.JunkMail mailing list.  To
 unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
 type unsubscribe Declude.JunkMail.  The archives can be found
 at http://www.mail-archive.com.


---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.