this is NOT a good solution, since a successful phish attack in this case would look exactly like the official red cross web site. plz put up an informative 404 page and no pointers to any phish-worthy sites. marc@sachsfamily.net ("Marcus H. Sachs") writes:
Thanks very much Reed!!! Great solution by the way.
Marc SANS ISC marc@sans.org
-----Original Message----- From: Reed Loden [mailto:reed@reedloden.com] Sent: Saturday, September 03, 2005 3:05 PM To: Marcus H. Sachs Cc: nanog@merit.edu; handlers@sans.org Subject: Re: FW: Need some help: IDEAS, Inc.
On Sat, 3 Sep 2005 11:00:03 -0400 "Marcus H. Sachs" <marc@sachsfamily.net> wrote:
The IDEAS, Inc. scum MUST die, but I'm all out of ideas at this point... the only other possibility that I can think of it to take them out at the DNS level. All of the "slave" sites at 206.251.184.10 use DirectNIC for their DNS... Anyone got sway with them?
Relayed to DirectNIC staff via IRC. They are dealing with it.
Instead of just dropping the redirection service and making it go to some invalid page, they are going to redirect all the sites to the official Red Cross site. ;)
~reed
-- Reed Loden - <reed@reedloden.com>
-- Paul Vixie