Easy to get around by making the active directory domain a subordinate of
another valid Internet domain.  Then any requests that Active Directory
sends out are returned to your own external DNS server.

-----Original Message-----
From: Matthew Bramble [mailto:[EMAIL PROTECTED]
Sent: Monday, September 22, 2003 11:40 AM
To: [EMAIL PROTECTED]
Subject: Re: [Declude.JunkMail] VeriSteal is stealing traffic from your
domain.


Who says that I have to register the domain that Active Directory is using?
My Active Directory name isn't intended to be used on the Internet.  In most
installations, you look to your own Active Directory server first for the
lookups, so if it exists on the Internet it won't interfeer...until now.

I think this is one of the issues that ICANN was talking about concerning
how the change can have unintended consequences (besides spam blockers).
This also looks to be a problem in general with how Microsoft delegates
lookups.  Their software shouldn't take the root of your Active Directory
tree and then append sub-domains to it and turn to the root servers for
resolution.  That appears to be a security risk if you ask me, and it
doesn't make sense to do.

Matt


---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

Reply via email to