Dobbins, Roland rdobbins at arbor.net
Mon Feb 3 08:07:06 UTC 2014

On Feb 3, 2014, at 2:55 PM, Dobbins, Roland <rdobbins at arbor.net> wrote:

> It would be useful to know whether there are in fact NATs, or are 'DNS forwarders' . . .

Another question is whether or not it's possible that in at least some cases, MITMing boxes on intermediary networks are grabbing these queries and then spoofing the scanner source IP as they redirect the queries . . . . if this is taking place, then it would be the network(s) with the MITMing box(es) which allow spoofing, irrespective of whether or not the intended destination networks do, yes?

Roland Dobbins <rdobbins at arbor.net> // <http://www.arbornetworks.com>

	  Luck is the residue of opportunity and design.

		       -- John Milton

More information about the NANOG mailing list