Re: DNS queries on HTML mail in Outlook

  • From: "William Lefkovics" <william@xxxxxxxxxxxxxxxxx>
  • To: "'[ExchangeList]'" <exchangelist@xxxxxxxxxxxxx>
  • Date: Mon, 2 May 2005 11:49:54 -0700

Not really.  Not anymore anyway.  

-----Original Message-----
From: Danny [mailto:nocmonkey@xxxxxxxxx] 
Sent: Monday, May 02, 2005 11:45 AM
To: [ExchangeList]
Subject: [exchangelist] Re: DNS queries on HTML mail in Outlook

On 5/2/05, Thomas W Shinder <tshinder@xxxxxxxxxxx> wrote:
> Hey folks,
> Here's an interesting finding on an Outlook 2003 client. I found that 
> when an HTML message comes in that has A HREF references to it, 
> Outlook does a DNS query for the domains included in the message. I 
> have pack captures showing this. Anyone ever head of such a thing?

Interesting.  Any other interesting traffic?

I wouldn't know because I only read email in plain text format with
Microsoft products.  This is a significant malware mitigation technique.


Other related posts: