Ah yes, using an unregistered domain name with a real TLD is a no-no. When
are people using AD going to get this?
�
AD must be configured correctly or else problems will come up when you least
expect it.
�
John Tolmachoff MCSE CSSA
Engineer/Consultant
eServices For You
www.eservicesforyou.com
�
-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Matthew Bramble
Sent: Monday, September 22, 2003 12:52 AM
To: [EMAIL PROTECTED]
Subject: Re: [Declude.JunkMail] VeriSteal is stealing traffic from your
domain.
�
I figured it out.� The problem is definitely with Active Directory.� Turning
off DNS Client on the local server only created a situation where their
first bogus sub-domain would timeout but a retry would still go to
SiteFinder.� Here's what nslookup returns when directed at the DNS server on
the co-located machine (not running Active Directory):
> adsfadsfasfdadsf.declude.com
Server:� ns1.igaia.com
Address:� 208.7.179.11

Non-authoritative answer:
Name:��� adsfadsfasfdadsf.declude.com.primary.igaiaoffice.com
Address:� 64.94.110.11
That's the bogus sub-domain appended to my local Active Directory domain
(replaced for security with an equivalent).�� The issue relates to the fact
that my real Active Directory domain name is not registered and lies in the
.com namespace, so when the lookup fails on the primary server, it goes back
to the local Active Directory server and appends the lookup that produces no
match to my unregistered Active Directory name, which returns the IP for
SiteFinder.� If I registered my Active Directory name, I wouldn't be
directed to SiteFinder.

Make sense now?

Matt



---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

Reply via email to