[dns-operations] Ang.: ALERT: .QA CCTLD in wrong hands currently

Anne-Marie Eklund-Löwinder anne-marie.eklund-lowinder at iis.se
Sun Oct 20 16:14:16 UTC 2013


https://twitter.com/Official_SEA16/status/391339315562688513

/amel

Skickat från min HTC


----- Reply message -----
Från: "Kauto Huopio" <kauto.huopio at ficora.fi>
Till: "Florian Weimer" <fw at deneb.enyo.de>
Kopia: "dns-operations at mail.dns-oarc.net" <dns-operations at mail.dns-oarc.net>
Rubrik: [dns-operations] ALERT: .QA CCTLD in wrong hands currently
Datum: lör, okt 19, 2013 22:23



On 10/19/2013 10:23 PM, Florian Weimer wrote:
> * Kauto Huopio:
>
>> And facebook.qa and tons of .qa govt domains etc. Note also this:
>>
>> google.com.qa.          14400   IN      MX      0 google.com.qa.
>
> That would actually be valid (but redudant).  It causes mail for
> google.com.qa to be delivered to the host at google.com.qa, based on
> the A/AAAA records of the domain.
>

Yes,but at the same moment google.com.qa was pointing to something More
Nasty. The correct MX pointing to google.com.qa seems to be

google.com.qa.          10800   IN      MX      10
google.com.s9a2.psmtp.com.
google.com.qa.          10800   IN      MX      10
google.com.s9b1.psmtp.com.
google.com.qa.          10800   IN      MX      10
google.com.s9b2.psmtp.com.
google.com.qa.          10800   IN      MX      10
google.com.s9a1.psmtp.com.

--Kauto

--
Kauto Huopio
Chief Specialist
Security Division (CERT-FI)
Finnish Communications Regulatory Authority (FICORA)
Itämerenkatu 3 A, P.O.Box 313, FI-00181 Helsinki.
Tel.: +358 29 5390 555, Mobile: +358505826131
Email: kauto.huopio(G)ficora.fi
Web: https://www.cert.fi/  http://www.ficora.fi
Personal PGP key:  EE83 84DA 2E80 1DC9 1EFF  77E2 52F6 6CD3 549C 2F32
Team PGP key:      933F C1ED AA90 090B D25C  C7EE 0089 4AA5 EBB4 1D94
_______________________________________________
dns-operations mailing list
dns-operations at lists.dns-oarc.net
https://lists.dns-oarc.net/mailman/listinfo/dns-operations
dns-jobs mailing list
https://lists.dns-oarc.net/mailman/listinfo/dns-jobs
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.dns-oarc.net/pipermail/dns-operations/attachments/20131020/5c4a1349/attachment.html>


More information about the dns-operations mailing list