Re: How much users are using my public dns server?

On Thu, 22 Apr 2010 02:36:15 -0700 (PDT), Alessandro Magno
<> wrote:

>On 21 Apr, 22:43, Jonathan de Boyne Pollard <J.deBoynePollard-
>newsgro...@NTLWorld.COM> wrote:
>> Yes.* You're providing promiscuous proxy DNS service to the world.* That's not something that one should do without very good reason.* You've offered the world at large the ability to burn your CPU time, your memory, your Internet bandwidth, and your money, free of charge; as well as the opportunities to use you for attack amplifications and to perform blind-but-informed attacks against your proxy DNS service and anyone depending from it. *Usually, one doesn't do that.* Why have you chosen to do that?
>
>Not everyone can make DNS queries, only my clients.
>How can I check if my dns vulnerability suffer cache poisoning? The
>website www.doxpara.com is unreachable.
>Maybe are my clients under attack? Thanks

The website you mentioned, resovled to an APIPA number, rather an
APIPA subnet ID 169.254.0.0. This is an invalid IP address, which is
why you can't get to the website. Your DNS correctly resolved it, as
mine did below:

> www.doxpara.com
Server: mydnsserver.domain.com
Address: 192.168.5.200

Non-authoritative answer:
Name: www.doxpara.com
Address: 169.254.0.0

You can also run the same test. Open a command prompt, type in
nslookup, hit enter, then type in the website FQDN (www.dospara.com).


Ace

On Fri, 23 Apr 2010 06:04:39 -0700 (PDT), Alessandro Magno
<> wrote:

>On 22 Apr, 18:54, "Ace Fekay [MVP - Directory Services, MCT]"
><ace...@mvps.RemoveThisPart.org> wrote:
>> You can also run the same test. Open a command prompt, type in nslookup, hit enter, then type in the website FQDN (www.dospara.com).
>> Ace
>
>The domain is rightly resolved, but I don't view the site. You?


I see now it resolves to:

Non-authoritative answer:
Name: www.dospara.com
Address: 210.156.89.9

So that means it was updated. Good.

I tested it in Internet Explorer 8, and it works fine. It connected to
a website with a foreign language.

Are you trying to connect to it from internally?
Is the website being hosted internally at your office, or is it at a
web hosting site?

If you are tryhing to connect to it from inside of your office, and
the webserver's physically inside your office, then you have a
split-zone scenario.

We will need to know more specifics to better assist. In the meantime,
please read my blog on split-zones.

Split Zone or no Split Zone - Can't Access Internal Website with
External Name
http://msmvps.com/blogs/acefekay/arc...rnal-name.aspx



Ace

This posting is provided "AS-IS" with no warranties or guarantees and confers no rights.

Please reply back to the newsgroup or forum for collaboration benefit among responding engineers, and to help others benefit from your resolution.

Ace Fekay, MVP, MCT, MCITP EA, MCTS Windows 2008 & Exchange 2007, MCSE & MCSA 2003/2000, MCSA Messaging 2003
Microsoft Certified Trainer
Microsoft MVP - Directory Services

If you feel this is an urgent issue and require immediate assistance, please contact Microsoft PSS directly. Please check http://support.microsoft.com for regional support phone numbers.

On Mon, 26 Apr 2010 00:27:19 -0700 (PDT), Alessandro Magno
<> wrote:

>On 23 Apr, 19:59, "Ace Fekay [MVP - Directory Services, MCT]"
><ace...@mvps.RemoveThisPart.org> wrote:
>> I see now it resolves to:
>>
>> Non-authoritative answer:
>> Name: * *www.dospara.com
>> Address: *210.156.89.9
>
>Dear Ace,
>
>I won't visit www.dospara.com, but www.doxpara.com!
>Thanks


I see. The website you want to visit is www.doxpara.com. This website
resolves to an APIPA number. The public DNS for www.doxpara.com is
misconfigured, as you can see below.

> www.doxpara.com
Server: ace-dc-02.bandwidthpros.com
Address: 192.168.50.30

Non-authoritative answer:
Name: www.doxpara.com
Address: 169.254.0.0

If you have access to the public DNS for www.doxpara.com, then you can
fix it by providing the actual IP address, otherwise you will not be
able to connect until it is fixed.


Ace