Brian Vagnoni on 11 Jul 2008 04:42:31 -0700


[Date Prev] [Date Next] [Thread Prev] [Thread Next] [Date Index] [Thread Index]

Re: [PLUG] DNS ... cache poisoning [big deal]


First, the problem I experienced seemed to be a Windows issue so it was a false alarm; sorry my bad.

Second, in the interview with Dan K, he stated that if your dns server recurses it's vulnerable.

Linky to the interview; don't stream(don't open); instead download(save link as) then play:

https://media.blackhat.com/webinars/...conference.mp3

--------------------------------------------------
Brian Vagnoni
PGP Digital Fingerprint
F076 6EEE 06E5 BEEF EBBD  BD36 F29E 850D FC32 3955
--------------------------------------------------


----- Original Message -----
From: Claude M. Schrader
[mailto:plug@claudeschrader.com]
To: Philadelphia Linux User's Group
Discussion List [mailto:plug@lists.phillylinux.org]
Sent: Thu, 10 Jul
2008 23:29:32 -0400
Subject: Re: [PLUG] DNS ... cache poisoning [big
deal]


> On 21:09 Thu 10 Jul     , K.S. Bhaskar wrote:
> > [KSB] Are the Wifi routers that so many of us have at home
> vulnerable
> > to DNS cache poisoning?  Thanx in advance.
> > 
> > Regards
> > -- Bhaskar
> >
> ___________________________________________________________________________
> 
> I looked into this earlier today - the DD-WRT firmware for the
> hackable
> routers is not vulnerable by default, because it is not configured to
> be a caching
> nameserver, it only forwards. If your router actually caches, it
> probably
> is vulnerable. Most important is upgrading any DNS servers, then your
> clients. OpenDNS servers are already fixed, so if your ISP's servers
> have
> not been patched yet, you may want to use OpenDNS for the time being.
> Claude
> ___________________________________________________________________________
> Philadelphia Linux Users Group         --       
> http://www.phillylinux.org
> Announcements -
> http://lists.phillylinux.org/mailman/listinfo/plug-announce
> General Discussion  --  
> http://lists.phillylinux.org/mailman/listinfo/plug
> 
___________________________________________________________________________
Philadelphia Linux Users Group         --        http://www.phillylinux.org
Announcements - http://lists.phillylinux.org/mailman/listinfo/plug-announce
General Discussion  --   http://lists.phillylinux.org/mailman/listinfo/plug