[6bone] Spammers already using 6bone ipv6 addresses?

[Jeroen Massar]

-----BEGIN PGP SIGNED MESSAGE-----

Russell King wrote:

> It seems that spammers may have started using IPv6 to spread their wares.
> I've recently had SMTP connection attempts to one of my internal machines
> (flint.arm.linux.org.uk) from 3ffe:0bc0:8000:0000:8000:0000:d582:a322.

But what did they send to you, was it a valid email or was it spam?
Headers svp ;)

> The interesting thing about this is that flint.arm.linux.org.uk has never
> been used as the source of email, but does appear in BitKeeper repositories
> as the host ID part of someone who commits.  (BitKeeper ids contain an
> object which looks a lot like an email address.)

And in DNS, see host -t aaaa -l arm.linux.org.uk :)
Eeky, 6to4 addresses, why don't you use a TB?
Or is it sufficient for what you use it for?

> Maybe someone's running an open relay on 6bone ?

Most boxes are dual stacked, so if it comes in over IPv4
it could go out over IPv6 ofcourse, check the headers.

> I'm also copying the person who seems to be the owner of that 
> IPv6 space.

You should copy viagenie (CC'd) as everybody can register
random data into the 6bone at the moment. I have sent a
proposal though to start cleaning the mess up in there
even though it's only three years untill it gets shut down...

ipv6-site:    ARKLEY-V6
origin:       AS65535
descr:        Experimenting with IPv6
country:      JP
prefix:       3FFE:BC0:8000::/48

ASN 65535 should not be appearing in there anyways...

I also wonder why somebody apparently from Japan needs
to have a tunnel from Canada while Japan has enough TB's
and even native deployments...

Greets,
 Jeroen

-----BEGIN PGP SIGNATURE-----
Version: Unfix PGP for Outlook Alpha 13 Int.
Comment: Jeroen Massar / jeroen@unfix.org / http://unfix.org/~jeroen/

iQA/AwUBP18CqimqKFIzPnwjEQIhLgCfcBw/WSAt5MDjZzZn02KAYBMWQ0oAn2vY
O9qUsPncFv84cscRg3R8CQgY
=9GYE
-----END PGP SIGNATURE-----