First ipv6 spam, and it's a good thing :)

[Matthew Huff]

Content. It was a virus via a HE.net tunnel.

 

 

 

----

Matthew Huff             | 1 Manhattanville Rd

Director of Operations   | Purchase, NY 10577

OTA Management LLC       | Phone: 914-460-4039

aim: matthewbhuff        | Fax:   914-460-4139

 

From: Marc Blanchet [mailto:marc.blanchet at viagenie.ca] 
Sent: Monday, June 04, 2012 12:46 PM
To: Matthew Huff
Cc: 'ipv6-ops at lists.cluenet.de'
Subject: Re: First ipv6 spam, and it's a good thing :)

 

 

Le 2012-06-04 à 12:31, Matthew Huff a écrit :





Just started testing the new version of Cisco Ironport 7.61 which is their
first release that supports ipv6. We have it up and running and the AAAA
record setup for one of our MX servers. Started receiving mail today via
ipv6 with no issues so far. No surprise, got our first spam via ipv6 a few
minutes after cutover J.

 

- of course, we have been receiving some for quite a while!!

- basic question related to your comment below: the spam was found by
inspecting the content of the email  or by some IP reputation?

 

Marc.





 

It will be interesting to see how Senderbase and other IP reputation systems
deal with the larger address range of IPv6.

 

 

 

----

Matthew Huff             | 1 Manhattanville Rd

Director of Operations   | Purchase, NY 10577

OTA Management LLC       | Phone: 914-460-4039

aim: matthewbhuff        | Fax:   914-460-4139

 

 

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.cluenet.de/pipermail/ipv6-ops/attachments/20120604/bdd47877/attachment-0001.html 
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/x-pkcs7-signature
Size: 5339 bytes
Desc: not available
Url : http://lists.cluenet.de/pipermail/ipv6-ops/attachments/20120604/bdd47877/attachment-0001.bin