Another suggestion which is remarkably effective in my
experience is to
do an identd lookup, not for the usual reasons but rather because quite
a number of the zombie-army machines are running toy identds to satisfy
things like IRC servers, and they exhibit certain protocol errors.
"Some of us" are running spoofed identds for other internal reasons. What do
you mean by "certain protocol errors"?
--
---------------------------------- personal:
http://www.armory.com/~spectre/ --
Cameron Kaiser, Floodgap Systems Ltd * So. Calif., USA * ckaiser(a)floodgap.com
-- For every action there is an equal and opposite criticism. -----------------