|
North American Network Operators Group Date Prev | Date Next | Date Index | Thread Index | Author Index | Historical Re: DNS with Akamai
joe wrote:
>
> Anyone noticing issues with Akamai and their DNS stuff?
> Just wondering because I'm seeing strange responses regarding
> www.foxnews.com, in that one of the Cnames a20.g.akamai.com
> is changing every 20 seconds, and sometimes no response at all.
It's really too soon to tell, but there is certainly something out there
aimed right at the root servers. I saw a post from someone on full
disclosure claiming that there was a 0-day exploit against bind (although
the version wasn't named). There was huge activity for about four hours,
but it leveled off about 20-30 minutes ago. I'm still analyzing earlier
ethereal dumps, and logs, looking for the injection, or other evidence.
Some of this would probably explain any anomalies you see at akamai.
--
...because as an industry we've tried to make security seem easier
than it actually is. We want to make it like driving a car when it's
more like flying an airplane.
Chris Brenton (at 08:22 -0400 19 Apr 2004 on NANOG)
|