Security Incidents mailing list archives

Re: DNS CACHE POISONING? - Our Portal is redirecting to our first competition


From: "Stephen John Smoogen" <smooge () gmail com>
Date: Tue, 22 Jan 2008 10:03:14 -0700

On 22 Jan 2008 00:55:30 -0000,  <ponchovaldes () gmail com> wrote:
Hello guys, we have a social network that is getting stronger, but we are having an issue.


And the issue is that Sometimes... our page redirects to another Portal, actually the page that redirects is our 
first competition,here in Latino America, i know that they are causing that kind of mess.. so we thought in this.


- We know that our DNS server is ok, and havent been compromised,

- DNS cache poisoning

- Malware ?

- some kind of virus that the guys(bad) made. ( the other portal - social network-)


You have provided too little information for anyone to really help.
1) What is your website's architecture?
 A) What kind of OS on the servers
 B) What kind of software on the servers
 C) Is it hosted on dedicated hardware or on a third party software
 D) Do you use some sort of 3rd party software to get to your page (eg
you rely on a company to send customers to your page.)
2) What do you mean by redirect. In small steps explain how a user
normally gets to and sees your site and what happens when it doesnt
work

That might be enough info for someone to start helping out (although
to really help someone would need to know where the site is etc.)


-- 
Stephen J Smoogen. -- CSIRT/Linux System Administrator
How far that little candle throws his beams! So shines a good deed
in a naughty world. = Shakespeare. "The Merchant of Venice"


Current thread: