Re: [Full-Disclosure] Transamericana.org

From: Antonio Henrique Oliveira (tat_at_postmark.net)
Date: 01/29/05

  • Next message: Darren Bounds: "Re: [Full-Disclosure] ICMP Covert channels question"
    Date: Sat, 29 Jan 2005 12:03:39 +0000
    To: full-disclosure@lists.netsys.com
    
    

    Gregh wrote:
    > ----- Original Message -----
    > From: "Antonio Henrique Oliveira" <tat@postmark.net>
    > To: <full-disclosure@lists.netsys.com>
    > Sent: Saturday, January 29, 2005 9:46 PM
    > Subject: [Full-Disclosure] Transamericana.org
    >
    >
    >
    >>Dear all,
    >>
    >>Please excuse me if this is a bit off-topic, but since this is the only
    >>IT related mailing list I subscribe (apart from Secunia's) I decided to
    >>post here.
    >>
    >>From sometime ago (I cannot determine exactly when this started to
    >>happen), my workstation (WinXP SP2 PT, fully patched) has been sending
    >>out ping requests to www.transamericana.org when I login to the machine
    >>(right at the beginning of the login process, and only at that time).
    >>
    >
    >
    > Perchance is your DNS hosted there? Eg, your ISP's DNS servers?
    >
    > Greg.
    No. The Linux box runs bind for the internal (and external) networks and
    does direct queries to the root servers, not using our ISP's DNS. The
    internal network is configured with DHCP and the DNS server for all
    hosts is set to the linux box internal address. Also, my workstation
    (and there are 5 more) is the only one doing this.

    Regards,

    -- 
    Anto'nio Henrique A. Proenca de Oliveira
    "Although we can never go back, like an old sweet song with a strong
    refrain, memories remain" - (Someone)
    Please avoid sending me Word or PowerPoint attachments.
    See http://www.fsf.org/philosophy/no-word-attachments.html
    $Id: .signature,v 1.3 2004/07/14 08:08:10 tat Exp tat $
    _______________________________________________
    Full-Disclosure - We believe in it.
    Charter: http://lists.netsys.com/full-disclosure-charter.html
    

  • Next message: Darren Bounds: "Re: [Full-Disclosure] ICMP Covert channels question"

    Relevant Pages

    • Re: standalone firewall connections
      ... >> I have assigned the linux firewall a 192.168.0.0 address, ... >> the firewall off, I can't get a connection with the other machines. ... >> network first, so I don't take down the actual NT network. ... They may have 6 DNS servers running ...
      (RedHat)
    • Re: Terrible Web Surfing Speed
      ... > Suse 9.1. ... > I switched to SBC/Yahoo DSL a few months ago. ... My LAN hosts thus have manually set DNS servers. ... > with IE of most pages compared to 10-30 second waits on Linux. ...
      (comp.os.linux.networking)
    • Re: Terrible Web Surfing Speed
      ... > Suse 9.1. ... > I switched to SBC/Yahoo DSL a few months ago. ... My LAN hosts thus have manually set DNS servers. ... > with IE of most pages compared to 10-30 second waits on Linux. ...
      (comp.os.linux.setup)
    • Terrible Web Surfing Speed
      ... I switched to SBC/Yahoo DSL a few months ago. ... My LAN hosts thus have manually set DNS servers. ... Win2k inside a VMware on this Linux box surfs normally. ...
      (comp.os.linux.setup)
    • Terrible Web Surfing Speed
      ... I switched to SBC/Yahoo DSL a few months ago. ... My LAN hosts thus have manually set DNS servers. ... Win2k inside a VMware on this Linux box surfs normally. ...
      (comp.os.linux.networking)