Monkeys RBL timeouts

[mikea]

On Tue, Sep 23, 2003 at 08:43:46PM +0200, Stephane Lentz wrote:
> On Tue, Sep 23, 2003 at 02:47:19PM +0100, Mike Zanker wrote:
> > On 23 September 2003 14:40 +0200 Raymond Dijkxhoorn
> > <raymond at PROLOCATION.NET> wrote:
> >
> > >Anyone else seeing Monkeys not working ok ?
> >
> > Yes:
> >
> > Sep 23 14:41:34 mallard exim[14951]: 2003-09-23 14:41:34 DNS list
> > lookup defer (probably timeout) for
> > 48.192.246.130.proxies.relays.monkeys.com: assumed not in list
> > Sep 23 14:45:42 mallard exim[15010]: 2003-09-23 14:45:42 DNS list
> > lookup defer (probably timeout) for
> > 48.192.246.130.proxies.relays.monkeys.com: assumed not in list
> > Sep 23 14:45:43 mallard exim[15010]: 2003-09-23 14:45:43 DNS list
> > lookup defer (probably timeout) for
> > 48.192.246.130.proxies.relays.monkeys.com: assumed not in list
> >
> > [etc.]
> >
> > Mike.
>
> They're under DDOS :
> http://lists.roaringpenguin.com/pipermail/mimedefang/2003-September/008293.html
>
> disable RBL tests with this blacklist right away.

It's worse than that. Monkeys.com is dead, according to this post
in comp.mail.sendmail, which I have no reason to disbelieve:

: From Jon.Kibler.multi at ng.aset.com Tue Sep 23 13:34:24 2003
: Path: news.litech.org!news-spur1.maxwell.syr.edu!news.maxwell.syr.edu!cyclone.bc.net!sjc70.webusenet.com!news.webusenet.com!sn-xit-02!sn-xit-04!sn-xit-06!sn-post-02!sn-post-01!supernews.com!corp.supernews.com!not-for-mail
: From: "Jon R. Kibler" <Jon.Kibler.multi at ng.aset.com>
: Newsgroups: comp.mail.sendmail
: Subject: monkeys.dom UPL DNSBL being DDOSed to death
: Date: Tue, 23 Sep 2003 14:15:31 -0400
: Organization: Advanced Systems Engineering Technology, Inc.
: Message-ID: <3F708DC3.AD02D033 at ng.aset.com>
: X-Mailer: Mozilla 4.78 [en] (WinNT; U)
: X-Accept-Language: en
: MIME-Version: 1.0
: Content-Type: text/plain; charset=us-ascii
: Content-Transfer-Encoding: 7bit
: X-Complaints-To: abuse at supernews.com
: Lines: 15
: Xref: news.litech.org comp.mail.sendmail:25425

: Greetings to all:

: I have some really sad news. I just got off the telephone with Ron
: Guilmette who runs the monkeys.com Unsecured Proxies List DNSBL. I
: hate to say it, but monkeys.com has been killed. It has been DDOSed
: to death.

: Ron says that every aspect of his network is undergoing a massive
: DDOS attack from thousands of IPs -- apparently many/all spoofed. He
: has tried to get law enforcement to investigate, but to no avail. He
: indicated that this is probably the end of his service.

: This makes two DNSBLs that have been DDOSed to death recently. Which
: one is next? NJABL? ORDB?

: The computer security industry really needs to figure out how to get
: law enforcement to take these attacks seriously. It would only take
: a few good prosecutions to put an end to these types of attacks. Any
: thoughts/suggestions?

: This is really a dark day for those of us fighting spam. It looks
: like the spammers have won a BIG battle. The only question now is
: who will be the causality in this war?

: Jon R. Kibler
: A.S.E.T., Inc.
: Charleston, SC  USA

This is, to put it mildly, Not Good News.

--
Mike Andrews
mikea at mikea.ath.cx
Tired old sysadmin since 1964