Re: [anti-spam-wg@localhost] New spammer DNS trick

[der Mouse <]

>> [spammer trick with glue records]
> Shouldn't the Registries just not accept bogus glue instead?

I'm not sure that's what happened.  I speculate that the history was

- Spammers set up nictxt.com, with glue (since it contains its own
  nameservers).  gtld-servers.net machines get NS and glue A records.

- Spammers set up nepzzz.com, with the same nameservers.
  gtld-servers.net notes that nepzzz.com is now using those records.

- Registrar takes down nictxt.com.  Delegation disappears from
  gtld-servers, but glue doesn't because there's another domain using
  those records.

Yes, this is a problem (if it's what happened); use of nameservers by
domains that don't need them as glue should not cause their retention
when their containing domain evaporates.  But it's at least as
plausible, to me, as the gtld-servers just being careless enough to
accept unnecessary glue A records.

/~\ The ASCII				der Mouse
\ / Ribbon Campaign
 X  Against HTML	       mouse@localhost
/ \ Email!	     7D C8 61 52 5D E7 2D 39  4E F1 31 3E E8 B3 27 4B