|
[Date Prev] [Date Next] [Thread Prev] [Thread Next] [Date Index] [Thread Index]
|
Re: [PLUG] DNS ... cache poisoning [big deal]
|
First, the problem I experienced seemed to be a Windows issue so it was a false alarm; sorry my bad.
Second, in the interview with Dan K, he stated that if your dns server recurses it's vulnerable.
Linky to the interview; don't stream(don't open); instead download(save link as) then play:
https://media.blackhat.com/webinars/...conference.mp3
--------------------------------------------------
Brian Vagnoni
PGP Digital Fingerprint
F076 6EEE 06E5 BEEF EBBD BD36 F29E 850D FC32 3955
--------------------------------------------------
----- Original Message -----
From: Claude M. Schrader
[mailto:plug@claudeschrader.com]
To: Philadelphia Linux User's Group
Discussion List [mailto:plug@lists.phillylinux.org]
Sent: Thu, 10 Jul
2008 23:29:32 -0400
Subject: Re: [PLUG] DNS ... cache poisoning [big
deal]
> On 21:09 Thu 10 Jul , K.S. Bhaskar wrote:
> > [KSB] Are the Wifi routers that so many of us have at home
> vulnerable
> > to DNS cache poisoning? Thanx in advance.
> >
> > Regards
> > -- Bhaskar
> >
> ___________________________________________________________________________
>
> I looked into this earlier today - the DD-WRT firmware for the
> hackable
> routers is not vulnerable by default, because it is not configured to
> be a caching
> nameserver, it only forwards. If your router actually caches, it
> probably
> is vulnerable. Most important is upgrading any DNS servers, then your
> clients. OpenDNS servers are already fixed, so if your ISP's servers
> have
> not been patched yet, you may want to use OpenDNS for the time being.
> Claude
> ___________________________________________________________________________
> Philadelphia Linux Users Group --
> http://www.phillylinux.org
> Announcements -
> http://lists.phillylinux.org/mailman/listinfo/plug-announce
> General Discussion --
> http://lists.phillylinux.org/mailman/listinfo/plug
>
___________________________________________________________________________
Philadelphia Linux Users Group -- http://www.phillylinux.org
Announcements - http://lists.phillylinux.org/mailman/listinfo/plug-announce
General Discussion -- http://lists.phillylinux.org/mailman/listinfo/plug
|
|