> Didn't J Postel run a test similar to that once <G>... > > On a side note, how would you go about testing something like this ? Obviously, cutting of the A root would have some pretty drastic consequences. On the other hand, there are many computers that have no business contacting directly the root servers. For example, in many enterprises and campuses, computers are suppose to send their DNS traffic to a configured relay. > What would be considered pass/fail metrics - well written applications > vs. people doing silly and stupid things (ie. Would it be consisdered a > failrue that sobig fails because it was incorrectly written ?) Looking at bugs in worms and using these bugs to squash the worms is fair game. Another known bug is the SMTP Hello line always contains a single token host name, instead of an FQDN. However, it is very likely that such bugs will be corrected in a next release -- say, Sobig.G. The better question for the IETF is whether we should do something to SMTP to make it less easy to send spoofed mail. -- Christian Huitema