[dns-operations] Where to find "DNS resolution path corruption"?

Mark Andrews Mark_Andrews at isc.org
Wed Feb 20 23:49:19 UTC 2008


> Paul Ferguson wrote:
> > -----BEGIN PGP SIGNED MESSAGE-----
> > Hash: SHA1
> > 
> > - -- Mark Andrews <Mark_Andrews at isc.org> wrote:
> >  
> >> 	ISP's shouldn't be re-writing NXDOMAIN without the consent
> >> 	of the client.  I suppect it could be classed as a criminal
> >> 	act to do so w/o the client's consent.
> > 
> > Thank you for mentioning this -- it is a important issue that I
> > think is largely dismissed, and unjustly so.
> 
> Now that they actively acknowledge they do things to "manage their 
> network" like send RST for bittorrent flows I doubt anyone would 
> consider it illegal.

	They are uttering forged reponses for monetry gain.  Go ask
	your local Police if that is a criminal offence.
 
> They are going to argue it's for a better {security|experience} or 
> something, but illegal?  I doubt it.  In fact, they'll use your own 
> words to make it sound right.

	If I want that experience I will signup for it.  There is
	absolutely NO security benefit in turning NXDOMAIN into a
	address.
 
> This is like a slow moving train coming from a 100 miles away...
> 
> -David
> _______________________________________________
> dns-operations mailing list
> dns-operations at lists.oarci.net
> http://lists.oarci.net/mailman/listinfo/dns-operations
-- 
Mark Andrews, ISC
1 Seymour St., Dundas Valley, NSW 2117, Australia
PHONE: +61 2 9871 4742                 INTERNET: Mark_Andrews at isc.org



More information about the dns-operations mailing list