[SpamCop.net - protecting the internet through technology]

[SpamCop-List] Re: Another rotating spam DN

Marc AlRalsky at spamcity.com
Sun Jan 18 17:29:14 EST 2004


"R. P. McCormick" <nobody at spamcop.net> wrote in message
news:buef3s$rtn$1 at news.spamcop.net...
> Whether the ISP saying they don't want reports ...
> and whether it is by domain name or IP addy ...
>
> > that is my concern. Did you ever get an answer about this?
>
> NO
>
>
> > yes, actually I only have to parse the spam 10 seconds later
> > to get a different reporting address. They generally rotate in
> > 10~20second intervals, a total of about 5 addresses in cycle.
>
> Sure.  I've written about this a number of times in the
> spamcop newsgroups ... for any given host record ...
> they have upwards of five different IP's being returned.
> This is an old feature - for round robin DNS.
> Take your choice ...
>
> And then the info has a very short TTL (time to live).

yes I understand and recall your explanation. I am interested in two things:
1) the possibility that Spamcop has a bug in the way that it assigns "ISP
not interested in reports" to the domain name rather than the IP address,
and 2) the question of whether this kind of round robin can be halted by
informing the domain name server, as suggested by Redstone.

Sounds like (1) is correct; it is a bug in Spamcop.




More information about the SpamCop-List mailing list