[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Earthlink Contact - DNS cache poisoning
- Subject: Earthlink Contact - DNS cache poisoning
- From: mysidia at gmail.com (Jimmy Hess)
- Date: Sat, 24 Sep 2011 19:51:11 -0500
- In-reply-to: <[email protected]>
- References: <[email protected]>
On Sat, Sep 24, 2011 at 7:43 PM, Will Dean <will at willscorner.net> wrote:
The "JOMAX.NET" response is indicative that there's a Paxfire box
in the mix,
intercepting the DNS query (probably installed by the ISP).
> Anyone out there in Earthlink land? I am seeing what looks to be a cache poisoning attack on ns1.mindspring.com.
> ;; AUTHORITY SECTION:
> www.google.com. ? ? ? ? 65535 ? IN ? ? ?NS ? ? ?WSC2.JOMAX.NET.
> www.google.com. ? ? ? ? 65535 ? IN ? ? ?NS ? ? ?WSC1.JOMAX.NET.
--
-JH