[65710] in North American Network Operators' Group

home help back first fref pref prev next nref lref last post

Re: Always renew your domain names

daemon@ATHENA.MIT.EDU (Valdis.Kletnieks@vt.edu)
Fri Dec 5 12:46:26 2003

To: Luca Filipozzi <lucaf+nanog@ece.ubc.ca>
Cc: nanog@nanog.org
In-Reply-To: Your message of "Fri, 05 Dec 2003 09:20:04 PST."
             <20031205172004.GD10143@bofh.ece.ubc.ca> 
From: Valdis.Kletnieks@vt.edu
Date: Fri, 05 Dec 2003 12:39:12 -0500
Errors-To: owner-nanog-outgoing@merit.edu


--==_Exmh_235178664P
Content-Type: text/plain; charset=us-ascii

On Fri, 05 Dec 2003 09:20:04 PST, Luca Filipozzi <lucaf+nanog@ece.ubc.ca>  said:

> > 93.102.108.206.in-addr.arpa domain name pointer
> > bells-network-has-lots-of-security-holes-to-exploit.bell-nexxia.net
> 
> This isn't a lapsed domain registration issue; we're not talking about A
> records.  It doesn't strike you as odd (read 'a security issue') that the
> PTR records have been changed?

Well, a PTR can point *anywhere* as long as you control the zone.  The only
thing that made it remotely interesting was this SOA:

102.108.206.in-addr.arpa. 0     IN      SOA     pluto.bell-nexxia.net. help.bell-nexxia.net. 2003110400 28800 7200 604800 86400

It's interesting that googling for 'bell-nexxia.net' doesnt actually hit anything.
Who did you THINK  owned that domain and address space?


--==_Exmh_235178664P
Content-Type: application/pgp-signature

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.2 (GNU/Linux)
Comment: Exmh version 2.5 07/13/2001

iD8DBQE/0MLAcC3lWbTT17ARAnLtAJ9pCL0j+GjkxDmIEZ3993My/Rtx1gCeMRAl
2TQqIL6NL0OIYZ7iMljsLBw=
=kfe/
-----END PGP SIGNATURE-----

--==_Exmh_235178664P--

home help back first fref pref prev next nref lref last post