Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 23 Jul 2003 21:25:12 -0500
From:      "Derik Wilson" <dwilson32@kc.rr.com>
To:        <freebsd-chat@freebsd.org>
Subject:   Re: DNS Question (quite a bit OT)
Message-ID:  <005101c3518a$d26d21d0$27451c41@webkl7bcj7ou3q>
References:  <3F1EDA3F.1998.C3F0EA@localhost> <a06001207bb4471eba341@[10.0.1.2]>

next in thread | previous in thread | raw e-mail | index | archive | help
Man! You guys are way over my head. (*Extreme freeBSD newbie here*) But I'll
try to keep up and learn from you all.
----- Original Message ----- 
From: "Brad Knowles" <brad.knowles@skynet.be>
To: "Nils Holland" <nils@thunderbridge.de>
Cc: <freebsd-chat@freebsd.org>
Sent: Wednesday, July 23, 2003 12:14 PM
Subject: Re: DNS Question (quite a bit OT)


> At 6:55 PM +0200 2003/07/23, Nils Holland wrote:
>
> >  What you have found out is actually correct, and that's the problem,
> >  because you I want to change it. The nameservers currently
"responsible"
> >  for thunderbridge.de are ns{1,2}.modwest.com.
>
> Ahh, okay.  I missed that part.  Sorry!
>
> >                                                 It has also been set up
> >  Concerning the other "oddities" you have discovered: I don't care much
> >  about Modwest once I'm out of there, but I will let the
loadbalanced.net
> >  folks know about them.
>
> Just keep in mind that any zones you have hosted on their
> machines are vulnerable, and any machines within those zones could be
> more easily broken into by using them as a vector.  If you're not
> going to work with them to try to help them get their stuff fixed
> before you move, then you want to be quick about moving your stuff
> somewhere else.
>
> >                          Interestingly, these folks don't seem to have
> >  much of a clue about DNS anyway, upon my first type=soa query I sent to
> >  their servers yesterday, I saw that the serial for both
thunderbridge.de
> >  and loadbalanced.net was set to 0.  Even I know that this isn't too
> >  sane, and I bet DeNIC would also have complained about this, if it
> >  hadn't been corrected.
>
> An SOA serial number of 0 is technically legal, but would almost
> certainly have raised additional flags at DEnic.
>
> >  And thanks for your suggestions, I'll have a look at the debugging
> >  tools you mentioned, so I get more of a clue about this myself ;-)
>
> Good luck!
>
> -- 
> Brad Knowles, <brad.knowles@skynet.be>
>
> "They that can give up essential liberty to obtain a little temporary
> safety deserve neither liberty nor safety."
>      -Benjamin Franklin, Historical Review of Pennsylvania.
>
> GCS/IT d+(-) s:+(++)>: a C++(+++)$ UMBSHI++++$ P+>++ L+ !E-(---) W+++(--)
N+
> !w--- O- M++ V PS++(+++) PE- Y+(++) PGP>+++ t+(+++) 5++(+++) X++(+++)
R+(+++)
> tv+(+++) b+(++++) DI+(++++) D+(++) G+(++++) e++>++++ h--- r---(+++)*
z(+++)
> _______________________________________________
> freebsd-chat@freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-chat
> To unsubscribe, send any mail to "freebsd-chat-unsubscribe@freebsd.org"
>





Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?005101c3518a$d26d21d0$27451c41>