TuskenTower on 11 Jul 2008 10:54:56 -0700


[Date Prev] [Date Next] [Thread Prev] [Thread Next] [Date Index] [Thread Index]

Re: [PLUG] DNS ... cache poisoning [big deal]


On Thu, Jul 10, 2008 at 11:29 PM, Claude M. Schrader
<plug@claudeschrader.com> wrote:
> On 21:09 Thu 10 Jul     , K.S. Bhaskar wrote:
>> [KSB] Are the Wifi routers that so many of us have at home vulnerable
>> to DNS cache poisoning?  Thanx in advance.
>>
>> Regards
>> -- Bhaskar
>> ___________________________________________________________________________
>
> I looked into this earlier today - the DD-WRT firmware for the hackable
> routers is not vulnerable by default, because it is not configured to be a caching
> nameserver, it only forwards. If your router actually caches, it probably
> is vulnerable. Most important is upgrading any DNS servers, then your
> clients. OpenDNS servers are already fixed, so if your ISP's servers have
> not been patched yet, you may want to use OpenDNS for the time being.
> Claude

Just use Verizon's public DNS servers at 4.2.2.1 through 4.2.2.5.

Amul
___________________________________________________________________________
Philadelphia Linux Users Group         --        http://www.phillylinux.org
Announcements - http://lists.phillylinux.org/mailman/listinfo/plug-announce
General Discussion  --   http://lists.phillylinux.org/mailman/listinfo/plug