I think the article is also wrong by saying that DNS could be used to defeat this. I'm betting that providers like AOL are just simply configuring that block of addresses to point to their own servers through routing and there's nothing that you can do with DNS.
This does potentially make the MAILFROM test somewhat simple to fix if Declude is already doing the lookups though. I would imagine that you could just test the senders IP for that block and fail on that. There's no documented filter capabilities though at present for the IP address in the From, probably because only the mail file itself is filtered, so this would probably have to come by way of the program itself.
BTW, this only affects .net and .com.
Matt
Keith Anderson wrote:
As near as I can figure, they all go to that class. I hope that makes it easier. I'm going to keep an eye on that one, though, in case it changes. It's not hard... just setup a script to resolve www._somethingrandomhere_.com and record the resolved IP address.
-----Original Message----- From: Todd Holt [mailto:[EMAIL PROTECTED] Sent: Monday, September 15, 2003 5:51 PM To: [EMAIL PROTECTED] Subject: RE: [Declude.JunkMail] A slight increase in spam not getting caught thanks to Network Solutions
Any more than they already have?? Its not a stupid move at all (if you NetSol). The make all of their money on the ignorance of newbies that just don't know any better. Once people realize what lyin', cheatin', stealin' scum they are...you get the idea.
Do all of the unregistered domains resolve to this range: 64.94.110.x???
Todd Holt Xidix Technologies, Inc Las Vegas, NV USA www.xidix.com
-----Original Message-----not getting
From: [EMAIL PROTECTED] [mailto:Declude.JunkMail-
[EMAIL PROTECTED] On Behalf Of Keith Anderson
Sent: Monday, September 15, 2003 4:40 PM
To: [EMAIL PROTECTED]
Subject: RE: [Declude.JunkMail] A slight increase in spam
caught thanks to Network Solutionsthat
Seems like the easiest solution is to block all email from domains
resolve to 64.94.110.x The question is, how do we do this? (I'mstill
learning... sorry if this is a stupid question.)
NS is going to make a lot of enemies doing this.
Just so people are aware, Network Solutions just hours ago
made the dumb
move of making all unregistered domains point to their web
site. As a
result, very little E-mail will fail the MAILFROM test in
Declude JunkMail
--- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
--- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
