[35769] in North American Network Operators' Group
Re: Reality Check
daemon@ATHENA.MIT.EDU (Patrick Greenwell)
Thu Mar 15 18:12:51 2001
Date: Thu, 15 Mar 2001 13:10:31 -0800 (PST)
From: Patrick Greenwell <patrick@cybernothing.org>
To: Scott Francis <scott@virtualis.com>
Cc: Jim Dixon <jdd@vbc.net>, "Timothy R. McKee" <trm3@nuvox.net>,
nanog@merit.edu
In-Reply-To: <20010314164410.O12114@virtualis.com>
Message-ID: <Pine.BSF.4.21.0103151303020.589-100000@localhost>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
Errors-To: owner-nanog-outgoing@merit.edu
On Wed, 14 Mar 2001, Scott Francis wrote:
>
> On Wed, Mar 14, 2001 at 09:13:17PM +0000, Jim Dixon had this to say:
> >
> > Spelling out the obvious: let's say that VBCnet started referring
> > our customers to the wrong name server to resolve names in .COM.
> > How many minutes would it be before the phones began ringing off
> > the hook? I can assure you that we would fix it really fast, and
> > take steps to make sure that we didn't screw up again.
>
> problem arises when individuals or organizations _purposefully_ subvert
> nameserver resolution.
If you own your network and are free to direct packets where you would
like them to go, rather it be to the DoC rootservers, the ORSC root
servers, or to blackhole new.net servers, how is it possible to
"subvert" nameserver resolution?