Re: Strange SMTP Garbage Flood

From: Johannes Verelst (johannesat_private)
Date: Wed Nov 14 2001 - 13:11:08 PST

  • Next message: Dave Dittrich: "Re: Analysis of SSH crc32 compensation attack detector exploit"

    On Wed, 14 Nov 2001, Duncan Simpson wrote:
    [snip]
    > I have used this method more than once to find out if abuse@<domain> exists or
    > not (and almost always throw in a known invalid name to see if the method
    > works). The same method could be abused to probe for valid user names and that
    > sort of thing.
    
    For finding abuse addresses for a domain, I would recommend:
    
    # whois -h whois.abuse.net spammerdomain.com
    
    Johannes
    -- 
    "Programming today is a race between software engineers striving to build
    bigger and better idiot-proof programs, and the Universe trying to produce
    bigger and better idiots. So far, the Universe is winning."
    
    
    ----------------------------------------------------------------------------
    This list is provided by the SecurityFocus ARIS analyzer service.
    For more information on this free incident handling, management 
    and tracking system please see: http://aris.securityfocus.com
    



    This archive was generated by hypermail 2b30 : Wed Nov 14 2001 - 13:14:47 PST