Man, they'll try anything to hack your system...

[Neil Schelly]

On Friday 27 January 2006 01:30 pm, Bill McGonigle wrote:
> On Jan 27, 2006, at 13:13, Ben Scott wrote:
> >   Anyone else seen this?  Is it just net.stupidity on the part of some
> > mail server operators somewhere, or are spammers/attackers trying
> > something new?
>
> Now that you mention it, I've seen few in the past few days with no MX
> records for the sending domain, even with a PTR record for the sending
> host.  Not the same, but similarly strange and recent.

Technically, the SMTP spec says that a domain's blank address counts as the 
last MX record to try.  So if gnhlug.org didn't have any MX records, then 
gnhlug.org itself should be tried.  It may not be pretty, but according to 
the RFC, it's perfectly valid not to have an MX record for a domain.
-N