9fans - fans of the OS Plan 9 from Bell Labs
 help / color / mirror / Atom feed
From: erik quanstrom <quanstro@quanstro.net>
To: 9fans@9fans.net
Subject: Re: [9fans] continued dns problems
Date: Thu, 22 Apr 2010 13:08:11 -0400	[thread overview]
Message-ID: <51e25a1b7911bd5c3f9ec06d57226b66@kw.quanstro.net> (raw)
In-Reply-To: <f2c8825311e53e096979d1824a06cb3b@kw.quanstro.net>

further information.  it appears that plan 9 dns is vulnerable to
cache poisoning.  i just caught a second machine with these entries

	 ns	localhost UN 1269483730/1269483730
	 ns	B.ROOT-SERVERS.NET UN 1273157904/1273157904
	 ns	C.ROOT-SERVERS.NET UN 1273157904/1273157904
	 ns	D.ROOT-SERVERS.NET UN 1273157904/1273157904
	 ns	E.ROOT-SERVERS.NET UN 1273157904/1273157904
	 ns	F.ROOT-SERVERS.NET UN 1273157904/1273157904
	 ns	G.ROOT-SERVERS.NET UN 1273157904/1273157904
	 ns	H.ROOT-SERVERS.NET UN 1273157904/1273157904
	 ns	I.ROOT-SERVERS.NET UN 1273157904/1273157904
	 ns	J.ROOT-SERVERS.NET UN 1273157904/1273157904
	 ns	K.ROOT-SERVERS.NET UN 1273157904/1273157904
	 ns	L.ROOT-SERVERS.NET UN 1273157904/1273157904
	 ns	M.ROOT-SERVERS.NET UN 1273157904/1273157904
	 ns	A.ROOT-SERVERS.NET UN 1273157904/1273157904
>>	 ns	ns1.parked.com UN 1269855557/1269855557
>>	 ns	ns2.parked.com UN 1269855557/1269855557
	 ns	A.ROOT-SERVERS.NET UD 1303335771/0
	 ns	B.ROOT-SERVERS.NET UD 1303335771/0
	 ns	C.ROOT-SERVERS.NET UD 1303335771/0
	 ns	D.ROOT-SERVERS.NET UD 1303335771/0
	 ns	E.ROOT-SERVERS.NET UD 1303335771/0
	 ns	F.ROOT-SERVERS.NET UD 1303335771/0
	 ns	G.ROOT-SERVERS.NET UD 1303335771/0
	 ns	H.ROOT-SERVERS.NET UD 1303335771/0
	 ns	I.ROOT-SERVERS.NET UD 1303335771/0
	 ns	J.ROOT-SERVERS.NET UD 1303335771/0
	 ns	K.ROOT-SERVERS.NET UD 1303335771/0
	 ns	L.ROOT-SERVERS.NET UD 1303335771/0
	 ns	M.ROOT-SERVERS.NET UD 1303335771/0
>>	 ns	ns1.trafficz.com UN 1272210527/1272210527
>>	 ns	ns2.trafficz.com UN 1272210527/1272210527
	 soa	ns1.parked.com admin.parked.com 2006032101 7200 1800 1209600 10800 AN 1269743556/1269743556
	 soa	ns01.cashparking.com dns.jomax.net 2010021700 28800 7200 604800 86400 AN 1271491124/1271491124
	 soa	ns1.gunas.net hostmaster 2008092011 3600 900 604800 14400 AN 1271839986/1271839986
	 soa	A.ROOT-SERVERS.NET nstld.verisign-grs.com 2010042200 1800 900 604800 86400 AN 1272015686/1272015686
	 soa	ns1.trafficz.com hostmaster 1271791802 16384 2048 1048576 2560 AN 1271945458/1271945458
[etc]


- erik



      reply	other threads:[~2010-04-22 17:08 UTC|newest]

Thread overview: 2+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2010-04-19  0:31 erik quanstrom
2010-04-22 17:08 ` erik quanstrom [this message]

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=51e25a1b7911bd5c3f9ec06d57226b66@kw.quanstro.net \
    --to=quanstro@quanstro.net \
    --cc=9fans@9fans.net \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).