Vincent Canfield, maneja weemail uye anotambira reseller cock.li, akawana kuti yake yese IP network yaingowedzerwa kune UCEPROTECT DNSBL runyorwa rwekutarisisa chiteshi kubva kumakina akavakidzana. Subnet yaVincent yaiverengerwa muChikamu 3 runyorwa, umo kuvharika kunoitwa nenhamba dzeautonomous system uye inovhara ma subnets ese kubva kune ma detectors e spam akaitwa kakawanda uye nemakero akasiyana. Nekuda kweizvozvo, mupi weM247 akaremara kushambadza kweimwe network yayo muBGP, kumisa basa nemazvo.
Dambudziko nderekuti maseva eUCEPROTECT ekunyepedzera, anonyepedzera kunge akavhurika relay uye rekodha kuedza kutumira tsamba kuburikidza nawo, otomatiki anosanganisira kero mune block rondedzero zvichienderana nechero chiitiko chetiweki, pasina kutarisa kumisikidzwa kwetiweki yekubatanidza. Iyo yakafanana blocklist nzira inoshandiswa zvakare neSpamhaus purojekiti.
Kuti upinde muchirongwa chekuvhara, zvakakwana kutumira imwe TCP SYN packet, iyo inogona kushandiswa nevanorwisa. Kunyanya, sezvo mbiri-nzira yekusimbisa yeTCP yekubatanidza isingadiwi, zvinokwanisika kushandisa spoofing kutumira pakiti inoratidza fake IP kero uye tanga kupinda mu block list ye chero muenzi. Paunenge uchiteedzera chiitiko kubva kune akati wandei kero, zvinokwanisika kukwira kuvharika kuenda kuNhamba 2 uye Level 3, iyo inoita kuvharika ne subnetwork uye autonomous system manhamba.
Rondedzero yeLevel 3 yakatanga kugadzirwa kurwisa vanopa vanokurudzira kuita zvakaipa kwevatengi uye vasingapindure zvichemo (somuenzaniso, kuitisa mawebhusaiti akagadzirirwa chaizvo kuitisa zvisiri pamutemo kana kushandira spammers). Mazuva mashoma apfuura, UCEPROTECT yakashandura mitemo yekupinda muNhoroondo 2 uye Level 3 zvinyorwa, izvo zvakatungamirira kune kuwedzera kwehasha kusefa uye kuwedzera kwehukuru hwezvinyorwa. Semuenzaniso, huwandu hwevakapinda muChikamu chechitatu hwakakura kubva pamakumi maviri nemasere kusvika pa3 masisitimu akazvimirira.
Kurwisa UCEPROTECT, iyo pfungwa yakaiswa pamberi pekushandisa spoofed kero panguva yekuongorora inoratidza IPs kubva kumhando yeUCEPROTECT vanotsigira. Nekuda kweizvozvo, UCEPROTECT yakapinda kero dzevatsigiri vayo uye nevamwe vanhu vazhinji vasina mhosva mumadhatabhesi ayo, izvo zvakagadzira matambudziko nekutumira email. Iyo Sucuri CDN network yakaverengerwawo muchirongwa chekuvharisa.
Source: opennet.ru