Podivne - zeby DNS hijack?

Jozef Hitzinger hitzinger na phobos.fphil.uniba.sk
Čtvrtek Srpen 2 08:57:38 CEST 2001


Zdravim,

dnes rano som v postmastrovom boxe nasiel 10 nedorucenych bouncov,
zacinajucich normalne:

Date: 1 Aug 2001 21:02:09 -0000
From: MAILER-DAEMON na phobos.fphil.uniba.sk
To: postmaster na phobos.fphil.uniba.sk
Subject: failure notice

Hi. This is the qmail-send program at phobos.fphil.uniba.sk. I tried to
deliver a bounce message to this address, but the bounce bounced!

<owner-israeline na PANKOW.INTER.NET.IL>:
216.65.1.3 does not like recipient.
Remote host said: 553 sorry, that domain isn't in my list of allowed
rcpthosts (#5.7.1) 
Giving up on 216.65.1.3.


Co ma zarazilo, je ze vo vsetkych je IP masiny ktora mail odmietla 
216.65.1.3! Podla hlaviciek to malo ist na: 

<owner-israeline na PANKOW.INTER.NET.IL>
<unwire-alert-return-47-David.Reichardt=fphil.uniba.sk na mail.securestone.com>
<et na eurotext.eurotel.sk>
<sun365 na pobox.com>
<gyepes na nrsys.sk>
<owner-israeline na PANKOW.INTER.NET.IL>
<gsis-phd-error na denver.du.edu>

a tieto nemaju ip 216.65.1.3, napriek tomu podla bouncy sa ju qmail
pokusal dorucit prave na tuto IP .. cim to moze byt? nejaky DNS hijack?
samotne spravy nie su len spam, minimalne jedna je normalna.

host 216.65.1.3 dal nejake freeweb.users.nieco, teraz pise doesn't exist.

tusite o co by mohlo kracat, resp. stretli ste uz nieco take?

-- 
jozef  :-)  postmaster fphil uniba sk
Hi! I'm a .signature virus! Copy me into your ~/.signature to help me spread!




Další informace o konferenci Sendmail