Bugtraq mailing list archives
Re: International DNS compromise?
From: Danny <nocmonkey () gmail com>
Date: Fri, 6 Aug 2004 15:12:17 -0400
On Thu, 5 Aug 2004 10:49:39 -0700 (PDT), Troy <tjk () tksoft com> wrote:
It's probably the ISP you are using. They are intercepting DNS requests and returning their own replies. It could be something malicious, but it could just as well be the ISP saving bandwidth by caching DNS queries.
I have never heard of an ISP which does not cache (Bind does by default) DNS queries. If they did not, their DNS servers would be constantly hitting the root servers, which would be horribly inconsiderate.
If they cache DNS queries they probably cache www queries as well.
See my last comment. ...D
Current thread:
- International DNS compromise? Zhen Shi (Aug 05)
- Re: International DNS compromise? john (Aug 05)
- Re: International DNS compromise? John Kinsella (Aug 05)
- <Possible follow-ups>
- Re: International DNS compromise? Troy (Aug 05)
- Re: International DNS compromise? Rio Martin. (Aug 06)
- Re: International DNS compromise? Danny (Aug 06)
- Re: International DNS compromise? John F. Waymouth (Aug 06)
- RE: International DNS compromise? travis . alexander (Aug 05)
- RE: International DNS compromise? Troy Monaghen (Aug 06)
- Re: International DNS compromise? bill (Aug 06)
- RE: International DNS compromise? Mike Clark (Aug 06)
- RE: International DNS compromise? Johan Nilsson (Aug 06)
- Re: International DNS compromise? Troy (Aug 06)