MX records, and that code red stuff

Hi, I notice that DNS:// really only works for regular dns records. I assume you'd have to go write your own stuff if you wanted to look up MX records? I have a need to develop a good domain/e-mail authentication routine and without the ability to look up MX it's going to get ugly. So... would I have to do my own dialect or something weird like that? On another note, there's probably a few webmasters here. I was looking through my logs and found a lot of those malformed requests which are the Code Red worm attacks. They wont be getting anywhere on my Xitami web server though :) I decided to do something nice and write a script which scans through the logs, collects all the unique ips and then uses the 'net send <message>' command - figuring that most of those boxes have little or no security so that's likely to get through. 507 messages delivered. The message told them they were infected with code red blah blah, how they got this message and my e-mail address. I got quite a lot of appreciative e-mail in return. It might be something you guys could consider? Regards, Mat.

Hi Mat, I've no idea about MX stuff...

> On another note, there's probably a few webmasters here. I was looking > through my logs and found a lot of those malformed requests which are > the Code Red worm attacks. They wont be getting anywhere on my Xitami > web server though :)

> I decided to do something nice and write a script which scans through > the logs, collects all the unique ips and then uses the 'net send > <message>' command - figuring that most of those boxes have little or > no security so that's likely to get through.

> 507 messages delivered. The message told them they were infected with > code red blah blah, how they got this message and my e-mail address. > > I got quite a lot of appreciative e-mail in return. It might be > something you guys could consider?

Hi Brett, BH> I was also contemplating informing the victims, but I figured I'd have to BH> try to work out email addresses from IP numbers. BH> Can you explain what you mean about the "net send command" - is this Windows BH> specific or something else... It is Windows specific yes, it's a service that runs on NT and 2K. It ought to be disabled but these ninnies with unpatched IISes that are getting infected by Code Red in the first place invariably have it on. Type it in the console yourself. Net send <machine name> "Bunch of text". Good for a laugh in the office to tell people they have mail when I want them to read it in the hurry :) (So you use this with the call/console command in rebol/command or rebol/view/pro of course.) I can send you the script if you like. It's really simple and undocumented but you'll work it out. Regards, Mat.

Hi Brett, BH> I've no idea about MX stuff... Indeed. I suspect the answer is clear, if I want to do this I'm going to have to do it myself low level. Real shame like, you could write a proper mailing list app in Rebol if this were done. Heh, or at least a simple mail server. Regards, Mat.

On Sat, Aug 11, 2001 at 08:16:51AM +0100, Mat Bettinson wrote:

> Hi, > > I notice that DNS:// really only works for regular dns records.

> I > assume you'd have to go write your own stuff if you wanted to look up > MX records? I have a need to develop a good domain/e-mail > authentication routine and without the ability to look up MX it's > going to get ugly. So... would I have to do my own dialect or > something weird like that?