Re: Help DNS cache poisoning

From: Lanwench [MVP - Exchange] (lanwench_at_heybuddy.donotsendme.unsolicitedmail.atyahoo.com)
Date: 09/29/04

  • Next message: Jim Byrd: "Re: need free virus scanner???" 
    Date: Wed, 29 Sep 2004 11:34:26 -0400

    Tony wrote:
    > We are running a WIN2K server with DNS that was exploited
    > with DNS cache poisoning. It was trying to redirect our
    > email to another server. We found what appeared to be a
    > fix in the MS knowledgebase article 241352.
    <snip
    >
    > When we checked this on the server there was no value in
    > the registry, but when going through the gui the Secure
    > cache against pollution box was checked.
    > Should there also be a registry setting when this check
    > box is enabled?
    > Any ideas how this server could get exploited with this
    > setting enabled?

    What inbound ports are open in your firewall?
    >
    > ANy assistance would be greatly appreciated.

  • Next message: Jim Byrd: "Re: need free virus scanner???"

    Relevant Pages

    • Re: DNS Injection Problem
      ... Unless the attacker has access to the wire DNS queries are going over, ... DNS cache poisoning is possible, albeit difficult to implement, ... > I am looking for a vulnerability in my server but it is a hard thing ...
      (Incidents)
    • Re: Help DNS cache poisoning
      ... >> with DNS cache poisoning. ... It was trying to redirect our ... >> email to another server. ... >> Should there also be a registry setting when this check ...
      (microsoft.public.security.virus)
    • Re: Newbie with a smallbiz2000 installation, check my config?
      ... > Windows creates a profile path under Documents & Settings. ... > a folder with that name already exists (maybe a local user with the ... > server, open the properties for this folder, and ensure that you have ... > you redirect key folders from a user's profile to a location on your ...
      (microsoft.public.backoffice.smallbiz2000)
    • Re: How to intercept error when httpRuntime maxRequestLength is ex
      ... "Hermit Dave" wrote in message ... > client side javascript and http module which could be helpful.. ... > To redirect the client your server has to send back a response. ...
      (microsoft.public.dotnet.framework.aspnet)
    • Re: Folder Redirection Desktop to multiple servers %HOMESHARE%
      ... Windows server 2003 lets you redirect the desktop to a share (is that what ... BTW if you use DFS without File Replication the data will live only on the ... > which would not work (I dont want to preplicate the traffic and not doing ...
      (microsoft.public.windows.group_policy)