[132156] in North American Network Operators' Group
Re: The i-root china reroute finally makes fox news. And congress.
daemon@ATHENA.MIT.EDU (Stephane Bortzmeyer)
Wed Nov 17 04:48:52 2010
Date: Wed, 17 Nov 2010 10:48:44 +0100
From: Stephane Bortzmeyer <bortzmeyer@nic.fr>
To: Suresh Ramasubramanian <ops.lists@gmail.com>
In-Reply-To: <AANLkTinGi9H+BbejXc7sime4t_ekeoGWvQt3-sESWBsw@mail.gmail.com>
Cc: nanog list <nanog@nanog.org>
Errors-To: nanog-bounces+nanog.discuss=bloom-picayune.mit.edu@nanog.org
On Wed, Nov 17, 2010 at 12:13:39PM +0530,
Suresh Ramasubramanian <ops.lists@gmail.com> wrote
a message of 17 lines which said:
> Man in the middle rewriting of DNS query responses is the only thing I
> can think of.
And it's easy to detect since the rewriter tells the truth about its
own name. From China, query "dig @I.root-servers.net CH TXT
hostname.bind" and, instead of the normal name of a Netnod instance,
you will get a chinese name (such as c1-zaojunmiao-ns1)...
