[154140] in North American Network Operators' Group
Re: DNS poisoning at Google?
daemon@ATHENA.MIT.EDU (Michael J Wise)
Wed Jun 27 00:14:54 2012
From: Michael J Wise <mjwise@kapu.net>
In-Reply-To: <CAL-SDLEasPZ6Dp5vvQN6PSK89Z_n2Cjj+vKpiTLX892MaQ7oQw@mail.gmail.com>
Date: Tue, 26 Jun 2012 21:14:14 -0700
To: nanog@nanog.org
Errors-To: nanog-bounces+nanog.discuss=bloom-picayune.mit.edu@nanog.org
On Jun 26, 2012, at 9:07 PM, Ishmael Rufus wrote:
> I'm glad I'm not the only one that miss this one:
>=20
> http://www.csulb.edu
>=20
> It is in his signature and email address as well ;)
The queries do seem to be taking a number of seconds, though, as opposed =
to being nearly instant when I reference the DNS servers of record =
directly.
The results I get at home (via SpeakEasy) all appear correct, though.
> On Tue, Jun 26, 2012 at 11:04 PM, Sadiq Saif <sadiq@asininetech.com> =
wrote:
>=20
>> Accidentally sent that to Matthew only,
>>=20
>> mind sharing the domain name?
>>=20
>> On Tue, Jun 26, 2012 at 11:53 PM, Matthew Black =
<Matthew.Black@csulb.edu>
>> wrote:
>>> Google Safe Browsing and Firefox have marked our website as =
containing
>> malware. They claim our home page returns no results, but redirects =
users
>> to another compromised website couchtarts.com.
>>>=20
>>> We have thoroughly examined our root .htaccess and httpd.conf files =
and
>> are not redirecting to the problem target site. No recent changes =
either.
>>>=20
>>> We ran some NSLOOKUPs against various public DNS servers and
>> intermittently get results that are NOT our servers.
>>>=20
>>> We believe the DNS servers used by Google's crawler have been =
poisoned.
>>>=20
>>> Can anyone shed some light on this?
>>>=20
>>> matthew black
>>> information technology services
>>> california state university, long beach
>>> www.csulb.edu<http://www.csulb.edu>
>>>=20
>>=20
>>=20
>>=20
>> --
>> Sadiq S
>> O< ascii ribbon campaign - stop html mail - www.asciiribbon.org
>>=20
>>=20
Aloha,
Michael.
--=20
"Please have your Internet License =20
and Usenet Registration handy..."