Re: More DNS poisoning?

From: Barry Margolin (barmar_at_alum.mit.edu)
Date: 04/23/05 

Date: Fri, 22 Apr 2005 21:17:20 -0400

In article <nfKdne9CYvJS2fTfRVn-iw@comcast.com>,
 Tony Lawrence <foo@pcunix.com> wrote:

> Amazingly enough, although a Comcast customer for internet, I haven't
> seen any DNS problems until today, and even today it seems to be minor
> and intermittent.
>
> But I have had email from several people today asking if my web site is
> down (it isn't), and I notice that when I ssh out to various sites I'm
> having some trouble with DNS here and there - mostly with names using
> networksolutions for DNS (though it's very hard to tell absolutely of
> course). I don't think the problem is networksoltions because I can
> usually do a dig@oneoftheirservers and get a response, but something is
> broken somewhere - or a big router is having problems somewhere maybe?
>
> Anybody else noticing this? Of the people I heard from, I know that two
> of them are Verizon customers, but I don't know the others..
>
> And of course it's also obvious that their dns issue must be
> intermittent also because otherwise I wouldn't have gotten their email
> asking me if I'm down.. :-)

There have been problems with the worldnic.com nameservers all day.
This morning I wasn't able to query many of them at all. Since this
afternoon I have been able to query them directly, but queries through
several ISP's recursive servers, including AT&T, Comcast, and
Level(3)/Verizon, are still failing.

One of my customers owns a domain that Network Solutions hosts, so we
called them and opened a service request. The CSR didn't have a
detailed explanation, just that they've been having server problems.

My current theory is that they've installed firewalls in front of their
nameservers, and they're treating the high-volume queries from ISP
nameservers as a DOS attack and blocking them. 

-- 
Barry Margolin, barmar@alum.mit.edu
Arlington, MA
*** PLEASE post questions in newsgroups, not directly to me ***

Relevant Pages

  • Re: Strange intermittent problem
    ... > I have a client with a strange problem. ... it looks like it may be a DNS ... > and the IP connectivity is working fine. ... > functionality on the SBS in such an intermittent way? ...
    (microsoft.public.windows.server.sbs)
  • Re: Strange intermittent problem
    ... > been able to isolate, it looks like it may be a DNS ... > and the IP connectivity is working fine. ... > functionality on the SBS in such an intermittent way? ...
    (microsoft.public.windows.server.sbs)
  • Re: Strange intermittent problem
    ... Is your client using their DNS servers? ... similar problem where intermittenly we would lose the ability to resolve ... >> functionality on the SBS in such an intermittent way? ...
    (microsoft.public.windows.server.sbs)
  • More DNS poisoning?
    ... Amazingly enough, although a Comcast customer for internet, I haven't ... seen any DNS problems until today, and even today it seems to be minor ... networksolutions for DNS (though it's very hard to tell absolutely of ... intermittent also because otherwise I wouldn't have gotten their email ...
    (comp.security.misc)
  • Re: Help SMPT Errors
    ... Parent PASS Missing Direct Parent check OK. ... INFO NS records at parent servers Your NS records at the parent servers are: ... PASS Parent nameservers have your nameservers listed OK. ... DNS to look up your domain, the first step (if it doesn't already know about ...
    (microsoft.public.exchange.admin)