Is your internet connection vulnerable to a security weakness in DNS ?

I don't profess to fully understand the ins and outs but in essence it seems to revolve around a compromised system having its DNS redirected or poisoned so you may be taken to phishing sites instead of your bank, etc.

More info at http://www.doxpara.com/ or Google away to your heart's content :-)

Some tools :-

http://www.thinkbroadband.com/tools/dnscheck.html - will see if your IP address (likely to be your router or a proxy) answers DNS queries. If so you may like to revise the firewall rules. I've found a couple of ADSL routers responding to this but it will also pick up if you port forward to a server behind the router or if you're on an external IP it may be your machine responding.

http://www.doxpara.com/ "check my DNS" button will see if the DNS server tha tis queried has been patched to use random ports. One of my ISPs has patched in the last 2 days and gone from "fail" to "pass".

http://www.zoneedit.com/lookup.html allows you to check any IP address to see if it resolves DNS queries - enter the target IP under "3. # Enter server name or IP (optional):" I used this to test my router (which failed the thinkbroadband test) from another connection without having anything connected to the router - in order to see if it was the router or the PC that was responding. It was the router.


Don't panic, but do see if your DNS is vulnerable and check that you're not unwittingly providing DNS services to the planet :-)


Phil

_______________________________________________
Peterboro mailing list
[email protected]
https://mailman.lug.org.uk/mailman/listinfo/peterboro

Reply via email to