Re: DNS queries on HTML mail in Outlook

  • From: Danny <nocmonkey@xxxxxxxxx>
  • To: "[ExchangeList]" <exchangelist@xxxxxxxxxxxxx>
  • Date: Mon, 2 May 2005 14:45:18 -0400

On 5/2/05, Thomas W Shinder <tshinder@xxxxxxxxxxx> wrote:
>  http://www.MSExchange.org/
>  
> Hey folks, 
>   
> Here's an interesting finding on an Outlook 2003 client. I found that when
> an HTML message comes in that has A HREF references to it, Outlook does a
> DNS query for the domains included in the message. I have pack captures
> showing this. Anyone ever head of such a thing? 

Interesting.  Any other interesting traffic?

I wouldn't know because I only read email in plain text format with
Microsoft products.  This is a significant malware mitigation
technique.

...D


Other related posts: