Scratch that... Yes, the A record. You are right. I need coffee or something... :-) -----Original Message----- From: Miller, Mark Sent: Monday, November 29, 2004 9:27 AM To: nanog@merit.edu Subject: RE: "Make love, not spam".... Not the A, the PTR... But yes, that could be a nasty retaliation by spammers with control of their DNS. I would hope, however, that the "screen saver's" target would be an IP address instead of a FQ mnemonic hostname. From the article, I understand that Lycos will be manually watching the list of targets and pushing updates to the users. Although I have traditionally been in favor of low bandwidth "fixes", this kind of appeals to my sense of poetic justice. -mark -----Original Message----- From: owner-nanog@merit.edu [mailto:owner-nanog@merit.edu] On Behalf Of Mike Tancsa Sent: Monday, November 29, 2004 9:12 AM To: Suresh Ramasubramanian Cc: nanog@merit.edu Subject: Re: "Make love, not spam".... ... What about the case where the spammer gets black listed, traffic starts pounding the rouge site and then the spammer changes the A record to be www.example.com instead. Now all of a sudden www.example.com is being pounded by all those screen savers. ---Mike