[dns-operations] MX record scanning

[Simon Munton]

> Interesting as this would indicate that your zone contents has
> leaked  to someone

My guess would be not - the names scanned do not relate at all closely 
to the names in the zones, loads of NXDOMAIN, suggesting its just guess 
work.


If the MX you describe are in one of the gtlds, then may be they get a 
copy through a zone access agreement. This allows one download per 24hr 
period, which would tie in with what you say?

If that was the case, then they are breaking the agreement, which 
specifically says access to the zone can't be used to prompt spam 
operations - but could be tough to prove who!