Verisign *SUCKS*

[Adrian Barker]

 >Remco Barendse wrote:
 >
 >> http://slashdot.org/article.pl?sid=03/09/16/0034210&mode=nested&tid=126&tid=95&tid=98&tid=99
 >>
 >> Verisign today just added wildcard A records pointing to 64.94.110.11 to
 >> the .com and .net zones.
 >>
 >> The effectively renders our spam checks for non-existent domains useless,
 >> now every domain exists.
 >>
 >> I suggest using firewall rules to block their ip 64.94.110.11 to prevent
 >> false lookups.
 >>
 >> Sorry for the foul language in the subject :)
 >
 >Not the massive rants going on on the NANOG list....
 >
 >--
 >Martin Hepworth
 >Senior Systems Administrator
 >Solid State Logic Ltd
 >+44 (0)1865 842300

Also, the address to which unknown domains resolve is listening on port 25, so
all email with invalid or mistyped .com or .net addresses ends up there. They
are rejecting recipients with the 500 error.




Adrian Barker, Information Systems
University College London, Gower Street, London WC1E 6BT
External phone: (+44) 020 7679  2795,  Fax (+44) 20 7388 5406
Internal phone: x 32795
Email: A.Barker at ucl.ac.uk