Root server problem

[Rich]

Starting today.. My root servers keep getting updated and
rest to a place called domainmonger.com. I called them and
they said its not them. Then I called Zone edit and they
said its a huge Flaw in MS DNS.. When I clear the cache
and reload the correct root servers, in 5 minutes they are
back to the domainmonger..


HELP!!!!!
Rich Shreiber

 

[Jonathan de Boyne Pollard]

R> Then I called Zone edit and they
R> said its a huge Flaw in MS DNS..

It is a huge flaw. It's also, however, one that is simple to remedy. Turn on
security against cache pollution and your problem will go away. (There's no
reason for this security to ever be disabled. I strongly recommend getting
into the habit of making sure that it is on - which it is not by default
unless you have the most recent service pack applied.)

It's a pity that ZoneEdit didn't tell you that, too.

 

[Erik Aronesty]

R> Then I called Zone edit and they
R> said its a huge Flaw in MS DNS..

It is a huge flaw. It's also, however, one that is simple to remedy. Turn on
security against cache pollution and your problem will go away. There's no
reason for this security to ever be disabled...

It's a pity that ZoneEdit didn't tell you that, too.

Sorry about that! We found a good link this afternoon and I was just
looking through the helpdesk log for the original person who called
us....

http://www.kb.cert.org/vuls/id/109475

Annoying MS habit: making important security features disabled by
default, and then naming them oddly. Reminds me of XP firewalls and
unicast RPF filtering...

 

[Jonathan de Boyne Pollard]

EA> Annoying MS habit: making important security features disabled
EA> by default, and then naming them oddly.

I too decried the fact that this security was disabled by default, for roughly
two years, until 2003-03-02 when the welcome news was published that in
Windows NT Server 2003 (and in Windows NT Server 2000 with Service Pack 3
applied) this security is now enabled by default.

As for the oddness of the name: "pollution" isn't really any more odd than
"poison" is. A more annoying habit is that of putting basic stuff under
"Advanced". (-: