Vincent Canfield, onye nchịkwa nke email na hosting reseller cock.li, chọpụtara na agbakwunyere netwọọdụ IP ya niile na akpaghị aka na ndepụta UCEPROTECT DNSBL maka nyocha ọdụ ụgbọ mmiri site na igwe mebere agbataobi. Vincent's subnet etinyere na listi Ọkwa 3, nke a na-eme igbochi ya site na ọnụọgụ sistemu kwụụrụ onwe ya wee kpuchie subnets niile sitere na ndị na-achọpụta spam kpalitere ugboro ugboro yana maka adreesị dị iche iche. N'ihi ya, onye na-eweta M247 kwụsịrị mgbasa ozi nke otu netwọkụ ya na BGP, na-akwụsịtụ ọrụ nke ọma.
Nsogbu a bụ na sava UCEPROTECT adịgboroja, nke na-eme ka ọ na-emepe relays ma dekọọ mgbalị izipu ozi site na onwe ha, na-etinye adreesị ozugbo na ndepụta ngọngọ dabere na ọrụ netwọk ọ bụla, na-enweghị ịlele njikọ netwọkụ. A na-ejikwa usoro mgbochi mgbochi yiri nke ahụ site na ọrụ Spamhaus.
Iji banye na ndepụta mgbochi, o zuru ezu izipu otu ngwugwu TCP SYN, nke ndị mwakpo nwere ike irigbu. Karịsịa, ebe ọ bụ na a chọghị nkwenye ụzọ abụọ nke njikọ TCP, ọ ga-ekwe omume iji spoofing zipu ngwugwu na-egosi adreesị IP adịgboroja ma malite ịbanye na ndepụta ngọngọ nke onye ọbịa ọ bụla. Mgbe ị na-eme emume site na ọtụtụ adreesị, ọ ga-ekwe omume ịbawanye mgbochi ruo Ọkwa 2 na Ọkwa 3, nke na-eme igbochi site na netwọk subnetwork na nọmba sistemụ kwụụrụ onwe ya.
Ebubere ndepụta ọkwa 3 iji buso ndị na-enye ndị ahịa ume ọrụ ọjọọ ma ghara ịza mkpesa (dịka ọmụmaatụ, saịtị nnabata nke emepụtara iji kwado ọdịnaya na-akwadoghị ma ọ bụ na-ejere ndị spammers ozi). Ụbọchị ole na ole gara aga, UCEPROTECT gbanwere iwu maka ịbanye na ọkwa 2 na ọkwa 3, nke mere ka nzacha ike na-abawanye na ọnụ ọgụgụ nke ndepụta ahụ. Dịka ọmụmaatụ, ọnụọgụ ndenye na listi Ọkwa 3 tolitere site na sistemụ 28 ruo 843 kwụụrụ onwe ya.
Iji mebie UCEPROTECT, etinyere echiche a iji adreesị spoofed n'oge nyocha nke na-egosi IP sitere na ndị na-akwado UCEPROTECT. N'ihi ya, UCEPROTECT banyere adreesị nke ndị nkwado ya na ọtụtụ ndị ọzọ aka ha dị ọcha na ọdụ data ya, nke kpatara nsogbu na nnyefe email. A gụnyekwara netwọk Sucuri CDN na ndepụta mgbochi.
isi: opennet.ru