Always renew your domain names

Valdis.Kletnieks at vt.edu Valdis.Kletnieks at vt.edu
Fri Dec 5 17:39:12 UTC 2003


On Fri, 05 Dec 2003 09:20:04 PST, Luca Filipozzi <lucaf+nanog at ece.ubc.ca>  said:

> > 93.102.108.206.in-addr.arpa domain name pointer
> > bells-network-has-lots-of-security-holes-to-exploit.bell-nexxia.net
> 
> This isn't a lapsed domain registration issue; we're not talking about A
> records.  It doesn't strike you as odd (read 'a security issue') that the
> PTR records have been changed?

Well, a PTR can point *anywhere* as long as you control the zone.  The only
thing that made it remotely interesting was this SOA:

102.108.206.in-addr.arpa. 0     IN      SOA     pluto.bell-nexxia.net. help.bell-nexxia.net. 2003110400 28800 7200 604800 86400

It's interesting that googling for 'bell-nexxia.net' doesnt actually hit anything.
Who did you THINK  owned that domain and address space?

-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 226 bytes
Desc: not available
URL: <http://mailman.nanog.org/pipermail/nanog/attachments/20031205/470afc2f/attachment.sig>


More information about the NANOG mailing list