Re: DNS spoofing - security problems...
From: Chris (chris23_at_ic-2000.com)
Date: 12/23/04
- Next message: msm: "slow response from internet when typing an invalid URL"
- Previous message: hon123456: "Why administrator have no right to add zone"
- In reply to: Roger Abell: "Re: DNS spoofing - security problems..."
- Messages sorted by: [ date ] [ thread ]
Date: Thu, 23 Dec 2004 10:17:51 -0500
Yeah, I know. I wish I didn't clear it before taking a look at its
contents. If it happens again, I definately will take a look at it.
"Roger Abell" <mvpNoSpam@asu.edu> wrote in message
news:uv1%231GD6EHA.3828@TK2MSFTNGP09.phx.gbl...
> Next time around we really need to get info on what is in the cache,
> as obviously that is the source of propagation to your clients.
> --
> Roger
>
> "Chris" <chris23@ic-2000.com> wrote in message
> news:irZxd.14260$8V5.9878@fe10.lga...
>> This morning on of our DNS servers started responding to all requests
>> with
>> the same IP address. The only exceptions were sites that the server was
>> authoritative for. I fixed it by clearing the cache, but I have to
>> wonder
>> how this is happening. This server runs Windows 2000 dns and has the
>> "secure cache against pollution" option set (and I confirmed it in the
>> registry).
>>
>> I contacted Microsoft and they had no idea what might be happening. They
>> thought that one of the root servers may have been compromised. I find
> this
>> hard to believe however. I found this link on the web:
>> http://www.atsnn.com/story/105049.html which describes a similar
> situation.
>> It appears that this has occured to others over the last few weeks, and
> any
>> root server problems probably would have been dealt with.
>>
>> Has anyone seen this before. It seems like a vulnerability that has not
> yet
>> been addressed. However, maybe its just a vulnerability in DNS in
> general.
>> Any thoughts?
>>
>>
>
>
- Next message: msm: "slow response from internet when typing an invalid URL"
- Previous message: hon123456: "Why administrator have no right to add zone"
- In reply to: Roger Abell: "Re: DNS spoofing - security problems..."
- Messages sorted by: [ date ] [ thread ]
Relevant Pages
|
