Date: Mon, 15 Dec 1997 07:46:28 +0000 (GMT) From: Terry Lambert <tlambert@primenet.com> To: sthaug@nethelp.no Cc: jgrosch@superior.mooseriver.com, hackers@FreeBSD.ORG Subject: Re: weird IP address Message-ID: <199712150746.AAA28454@usr09.primenet.com> In-Reply-To: <26132.882093169@verdi.nethelp.no> from "sthaug@nethelp.no" at Dec 14, 97 10:52:49 am
next in thread | previous in thread | raw e-mail | index | archive | help
> > While sending out hate mail to the latest round of spammers I got an answer > > back from nslookup that I just do not understand. I got spam from > > MoneyMakers.com. When I did an nslookup I got the following: > > > > superior% nslookup moneymakers.com > > Server: superior.mooseriver.com > > Address: 205.166.121.5 > > > > Non-authoritative answer: > > Name: moneymakers.com > > Address: 1.1.1.1 > > My guess is that they're doing that precisely to keep you from responding. > You'll find: > > moneymakers.com. 288800 MX 10 mail.moneymakers.com. > ftp.moneymakers.com. 288800 A 1.1.1.1 > mail.moneymakers.com. 288800 A 1.1.1.1 > www.moneymakers.com. 288800 A 1.1.1.1 > > So they're doing everything they can to prevent you from responding to > their spam. Try looking at the Received: lines for some (possibly) more > relevant info. This is good. Contact InterNIC. They will revoke the domain pending pointing to real IP addresses for the A records. I have had luck with this tack before. Terry Lambert terry@lambert.org --- Any opinions in this posting are my own and not those of my present or previous employers.
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?199712150746.AAA28454>