CastleCops, Internet Crime Fighters
Need help? Click here to register for free! Absolutely zero advertisements on this site!

Donation/Premium
spacer
block bottom
Security Central
spacer
· Home
· PIRT/Fried Phish
· MIRT
· SIRT
· Deutsch
· Wiki
· Newsletter
· O16/ActiveX
· CLSID List
· Contest2007
· Downloads
· Feedback (send)
· Forums
· HijackThis
· Hijacktrend
· LSPs
· My Downloads
· O18
· O20
· O21
· O22
· O23
· O9
· Premium
· Private Messages
· Proxomitron
· Reviews
· Search
· StartupList
· Stories Archive
· Submit News
· WsIRT
· Your Account
· Acceptable Use Policy
block bottom
spacer spacer

XIN NET REPAIRS THEIR MX

 
Post new topic   Reply to topic       All -> FavForums -> Knujon General Discussion [del.icio.us!] [digg it!] [reddit!]
View previous topic :: View next topic  
Author Message
tembow

Blue Angel
Premium Member

Joined: Oct 10, 2005
Posts: 2945

Blue Security Premium

PostPosted: Thu May 29, 2008 1:53 pm    Post subject: XIN NET REPAIRS THEIR MX
Reply with quote

In response to a notification from one of the Complainterator team:

abuse@xinnet.com wrote:
> Jim,ÄúºÃ£¡
>
> Thank you,the MX recorder already changed Smile
>
> ======= 2008-05-26 18:01:18 ÄúÔÚÀ´ÐÅÖÐдµÀ£º=======
>

Quote:

>> ---
>> There is a serious error in the definition of the mail servers for Xinnet. It is not able
>> to receive mail from most Internet mail exchanges.
>> The problem is shown here
>> xinnet.com mail is handled by 5 mail.xinnet.com.
>> xinnet.com mail is handled by 10 bf-mail.xinnet.com.
>> mail.xinnet.com. 14400 IN CNAME cemail142.ce.net.cn.
>> bf-mail.xinnet.com. 14400 IN CNAME cemail198.ce.net.cn.
>> It is not valid to set a CNAME as the address for an MX. It must be an IP address.
>> The records in the DNS for mail and bf-mail should be address records
>> mail.xinnet.com. 14400 IN A 123.100.7.9
>> bf-mail.xinnet.com. 14400 IN A 123.100.7.9
>> Please forward this advice to the person responsible for the administration of the
>> Xinnet.com domain name.


Sure enough

- xinnet.com mail is handled by 10 bf-mail.xinnet.com.
- xinnet.com mail is handled by 5 mail.xinnet.com.
- mail.xinnet.com has address 123.100.7.9
- bf-mail.xinnet.com has address 123.100.7.9

That was a quick response.

Back to top
View users profile Send private message Visit posters website AIM Address
Knujon

Captain
Captain
Premium Member

Joined: May 25, 2006
Posts: 592
Location: USA
Premium

PostPosted: Thu May 29, 2008 2:49 pm    Post subject:
Reply with quote

Nice work

Back to top
View users profile Send private message Visit posters website
ahoier

SIRT Handler


Joined: Jan 14, 2006
Posts: 1118
Location: USA

PostPosted: Thu May 29, 2008 4:16 pm    Post subject:
Reply with quote

Great work guys!

Jim_P - he holds the keys to XIN Net Razz

Back to top
View users profile Send private message Visit posters website AIM Address Yahoo Messenger MSN Messenger
Jim_P

Sergeant
Sergeant
Premium Member

Joined: Apr 19, 2004
Posts: 133

Premium

PostPosted: Thu May 29, 2008 5:30 pm    Post subject:
Reply with quote

ahoier wrote:
Great work guys!

Jim_P - he holds the keys to XIN Net Razz


I might hold the keys but it was Tembrow piece that I forwarded so he should get the credit. I am glad that XINNET understood the piece because I sure did not.

Jim

Back to top
View users profile Send private message
tembow

Blue Angel
Premium Member

Joined: Oct 10, 2005
Posts: 2945

Blue Security Premium

PostPosted: Thu May 29, 2008 9:37 pm    Post subject:
Reply with quote

Any response and action from Xin Net is a major achievement, relatively speaking. I keep having this urge to draft an email from Jim requesting a list of 10,000 sites be suspended. Something like -

Please suspend these: http://wiki.castlecops.com/XIN_NET_Removals
and
http://wiki.castlecops.com/XIN_NET_Removals_Archive
Thank you.

Well, it worked with Todaynic, and it worked in Hong Kong! Smile

Back to top
View users profile Send private message Visit posters website AIM Address
ahoier

SIRT Handler


Joined: Jan 14, 2006
Posts: 1118
Location: USA

PostPosted: Thu May 29, 2008 10:33 pm    Post subject:
Reply with quote

Sounds like a good idea Wink I mean, it probably can't hurt, since Jim_P has "support tickets" open with XIN Net....

Back to top
View users profile Send private message Visit posters website AIM Address Yahoo Messenger MSN Messenger
Alvaro

Trooper
Trooper


Joined: Jan 28, 2008
Posts: 31
Location: Reno, NV (USA)

PostPosted: Fri May 30, 2008 2:19 pm    Post subject:
Reply with quote

I'm not sure, but what are those pink things with curly tails and wings flying up there?

Back to top
View users profile Send private message Visit posters website
tembow

Blue Angel
Premium Member

Joined: Oct 10, 2005
Posts: 2945

Blue Security Premium

PostPosted: Sun Jun 01, 2008 9:22 am    Post subject:
Reply with quote

It looks like Xin Net has just shut down about 5,000 domains. The shutdowns match the list posted at http://wiki.castlecops.com/XIN_NET_Removals

For example, taking one brand at random, we listed

Brand = Pharmacy Express
Reported 2008-05-06 (trobbins) (16)

bestmedfood.com
clubmedkids.com
euromeddirect.com
euromedworld.com
greatmedcare.com
greatmedspa.com
herepharmacydirect.com
justmedonline.com
medproemail.com
seniormedinfo.com
sportsmeddirect.com
sportsmedguide.com
sportsmedinc.com
sportsmedworld.com
swissmedinfo.com
yourmedtech.com

All created on April 29
All changed to ClientHold on May 30

Back to top
View users profile Send private message Visit posters website AIM Address
Display posts from previous:   
Post new topic   Reply to topic       All -> FavForums -> Knujon General Discussion All times are GMT
Page 1 of 1

 
Quick Reply:
Username: 

Quote the last message
Attach signature (signatures can be changed in profile)
 
You can post new topics in this forum
You can reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You cannot attach files in this forum
You can download files in this forum


Powered by phpBB © 2001 phpBB Group
spacer spacer