From owner-freebsd-security@FreeBSD.ORG  Sat Dec 31 14:57:03 2005
Return-Path: <owner-freebsd-security@FreeBSD.ORG>
X-Original-To: freebsd-security@freebsd.org
Delivered-To: freebsd-security@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id 6C28F16A41F;
	Sat, 31 Dec 2005 14:57:03 +0000 (GMT) (envelope-from bsam@ipt.ru)
Received: from mail.ipt.ru (mail.ipt.ru [80.253.10.82])
	by mx1.FreeBSD.org (Postfix) with ESMTP id 8033743D5A;
	Sat, 31 Dec 2005 14:57:02 +0000 (GMT) (envelope-from bsam@ipt.ru)
Received: from doc.sem.ipt.ru ([192.168.12.1] helo=srv.sem.ipt.ru)
	by mail.ipt.ru with esmtp (Exim 4.54 (FreeBSD))
	id 1EsiAG-000Kz6-8O; Sat, 31 Dec 2005 17:57:00 +0300
Received: from bsam by srv.sem.ipt.ru with local (Exim 4.54 (FreeBSD))
	id 1Esi9Q-000GCU-ME; Sat, 31 Dec 2005 17:56:08 +0300
To: "Michael Scheidell" <scheidell@secnap.net>
References: <B3BCAF4246A8A84983A80DAB50FE724255BD66@secnap2.secnap.com>
From: Boris Samorodov <bsam@ipt.ru>
Date: Sat, 31 Dec 2005 17:56:08 +0300
In-Reply-To: <B3BCAF4246A8A84983A80DAB50FE724255BD66@secnap2.secnap.com>
	(Michael Scheidell's message of "Fri, 30 Dec 2005 17:28:28 -0500")
Message-ID: <19450407@srv.sem.ipt.ru>
User-Agent: Gnus/5.11 (Gnus v5.11) Emacs/22.0.50 (berkeley-unix)
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Cc: ports@freebsd.org, freebsd-security <freebsd-security@freebsd.org>,
	pbalyoz@jammed.com
Subject: Re: Domtools.com hyjacked?
X-BeenThere: freebsd-security@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: "Security issues \[members-only posting\]"
	<freebsd-security.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-security>, 
	<mailto:freebsd-security-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-security>
List-Post: <mailto:freebsd-security@freebsd.org>
List-Help: <mailto:freebsd-security-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-security>, 
	<mailto:freebsd-security-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Sat, 31 Dec 2005 14:57:03 -0000

Hi!


On Fri, 30 Dec 2005 17:28:28 -0500 Michael Scheidell wrote:

> Attempted to install dlint port.

> Only distribution site is www.domtools.com

> Email to 'content@domtools.com' and pab@domtools.com bounces (can't
> relay)
> Phone number missing on whois record.

> Fetch of tarball fails checksum (it delivers a generic 'web hosted
> search engine that just hijacked someone's domain' web page.

> Maybe domtools didn't renew?  New web company messed up dns or apache
> virtual hosting records?

> Don't know where else to find a safe copy of dlint

ftp://ftp.cronyx.ru/pub/FreeBSD/ports/distfiles/

MD5 and SHA256 checksums are correct.


WBR
-- 
Boris B. Samorodov, Research Engineer
InPharmTech Co,     http://www.ipt.ru
Telephone & Internet Service Provider