[dns-operations] ALERT: .QA CCTLD in wrong hands currently

[Kauto Huopio]

On 10/19/2013 10:23 PM, Florian Weimer wrote:
> * Kauto Huopio:
> 
>> And facebook.qa and tons of .qa govt domains etc. Note also this:
>>
>> google.com.qa.          14400   IN      MX      0 google.com.qa.
> 
> That would actually be valid (but redudant).  It causes mail for
> google.com.qa to be delivered to the host at google.com.qa, based on
> the A/AAAA records of the domain.
> 

Yes,but at the same moment google.com.qa was pointing to something More
Nasty. The correct MX pointing to google.com.qa seems to be

google.com.qa.          10800   IN      MX      10
google.com.s9a2.psmtp.com.
google.com.qa.          10800   IN      MX      10
google.com.s9b1.psmtp.com.
google.com.qa.          10800   IN      MX      10
google.com.s9b2.psmtp.com.
google.com.qa.          10800   IN      MX      10
google.com.s9a1.psmtp.com.

--Kauto

-- 
Kauto Huopio
Chief Specialist
Security Division (CERT-FI)
Finnish Communications Regulatory Authority (FICORA)
Itämerenkatu 3 A, P.O.Box 313, FI-00181 Helsinki.
Tel.: +358 29 5390 555, Mobile: +358505826131
Email: kauto.huopio(G)ficora.fi
Web: https://www.cert.fi/  http://www.ficora.fi
Personal PGP key:  EE83 84DA 2E80 1DC9 1EFF  77E2 52F6 6CD3 549C 2F32
Team PGP key:      933F C1ED AA90 090B D25C  C7EE 0089 4AA5 EBB4 1D94