North American Network Operators Group

Date Prev | Date Next | Date Index | Thread Index | Author Index | Historical

RE: .mn.rr.com dns possibly hacked?

  • From: Michelle T
  • Date: Sat Mar 17 10:41:34 2001

I use my Minneapolis (actually St Paul) RR Cable modem every day, all day
long for vpn access as well as personal use. Haven't seen a single problem
with dns resolution using mn.rr.com. I suppose it is possible that mpls and
st paul use different servers. I believe their primary is my secondary.

-----Original Message-----
From: [email protected] [mailto:[email protected]]On Behalf Of
John Payne
Sent: Saturday, March 10, 2001 2:55 PM
To: Kevin Day
Cc: [email protected]
Subject: Re: .mn.rr.com dns possibly hacked?



On Sat, Mar 10, 2001 at 01:28:06PM -0600, Kevin Day wrote:
>
> One of my customers, who's got a cable modem off of mn.rr.com is reporting
> that roughly half the DNS lookups being done on their servers are
returning
> the IP to www.lolitasex.com. I have no idea how widespread this is, but
> apparently others in minneapolis are seeing the same thing.

Is he running his on caching nameserver, or  roadrunners?

I expect someone needs to upgrade their nameserver.

--
John Payne      http://www.sackheads.org/jpayne/    [email protected]
http://www.sackheads.org/uce/                    Fax: +44 870 0547954
        To send me mail, use the address in the From: header