phishing_bad_sites broken?

[Rick Cooper]

 > -----Original Message-----
 > From: mailscanner-bounces at lists.mailscanner.info 
 > [mailto:mailscanner-bounces at lists.mailscanner.info] On 
 > Behalf Of Julian Field
 > Sent: Wednesday, February 27, 2008 11:46 AM
 > To: MailScanner discussion
 > Subject: Re: phishing_bad_sites broken?
 > 
 > -----BEGIN PGP SIGNED MESSAGE-----
 > Hash: SHA1
 > 
 > Current news appears to be this:
 > 
 > I suppose you could say that for some reason, 500k 
 > mailservers across the globe to decided to get that file at 
 > the same time yesterday and effectively DDOSd the server 
 > www.mailscanner.eu sits on
 > 
 > It will be reconnected at some point this evening hopefully, 
 > and we'll 
 > see if it bears up.

Or, someone with a botnet who likes to go phishing is pissed at MailScanner
for providing the service. It would be interesting to see how many hosts are
cable/dsl dynamic hosts.

Also a good time to mention you might want to add a random delay to the
update script to prevent everyone setting their cron to run at midnight,
3:00 or some other hourly interval.

Rick

 > 
 > Julian Field wrote:
 > > * PGP Signed: 02/27/08 at 15:59:13
 > >
 > > This is due to a suspected attack on the www.mailscanner.eu site.
 > > I will check with the Blacknight guys to see where we're 
 > at and will 
 > > get back to you a.s.a.p.
 > >
 > > Jules.
 > >
 > > Jeff A. Earickson wrote:
 > >> Julian,
 > >>
 > >> My hourly cronjob to update bad phishing sites has been broken
 > >> for the last day or so:
 > >>
 > >> /opt/MailScanner/bin/update_bad_phishing_sites
 > >> --10:25:27--  
 > http://www.mailscanner.eu/phishing.bad.sites.conf.master
 > >>            => `phishing.bad.sites.conf.master'
 > >> Resolving www.mailscanner.eu... 127.0.0.1
 > >> Connecting to www.mailscanner.eu|127.0.0.1|:80... failed: 
 > Connection 
 > >> refused.
 > >>
 > >> Is something broken in DNS land?  This address always resolves
 > >> to loopback here.  Anybody else seeing this?
 > >>
 > >> Jeff Earickson
 > >> Colby College
 > >
 > > Jules
 > >
 > 
 > Jules
 > 
 > - -- 
 > Julian Field MBCS CITP CEng
 > jkf at ecs.soton.ac.uk
 > Teaching Systems Manager
 > Electronics & Computer Science
 > University of Southampton
 > SO17 1BJ, UK
 > 
 > 
 > -----BEGIN PGP SIGNATURE-----
 > Version: PGP Desktop 9.8.0 (Build 2158)
 > Comment: (pgp-secured)
 > Charset: ISO-8859-1
 > 
 > wj8DBQFHxZPYEfZZRxQVtlQRAubsAJ90xzmKipceseyUbxSRQw+l/n6bEwCgr7bj
 > BWQyOlYovFjibDNqjLBvqDw=
 > =rC1f
 > -----END PGP SIGNATURE-----
 > 
 > -- 
 > This message has been scanned for viruses and
 > dangerous content by MailScanner, and is
 > believed to be clean.
 > 
 > --
 > MailScanner mailing list
 > mailscanner at lists.mailscanner.info
 > http://lists.mailscanner.info/mailman/listinfo/mailscanner
 > 
 > Before posting, read http://wiki.mailscanner.info/posting
 > 
 > Support MailScanner development - buy the book off the website!
 > 
 > --
 > This message has been scanned for viruses and
 > dangerous content by MailScanner, and is
 > believed to be clean.
 > 
 > 


--
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.