nanog mailing list archives

Re: The i-root china reroute finally makes fox news. And congress.


From: Stephane Bortzmeyer <bortzmeyer () nic fr>
Date: Wed, 17 Nov 2010 10:48:44 +0100

On Wed, Nov 17, 2010 at 12:13:39PM +0530,
 Suresh Ramasubramanian <ops.lists () gmail com> wrote 
 a message of 17 lines which said:

Man in the middle rewriting of DNS query responses is the only thing I
can think of.

And it's easy to detect since the rewriter tells the truth about its
own name. From China, query "dig @I.root-servers.net CH TXT
hostname.bind" and, instead of the normal name of a Netnod instance,
you will get a chinese name (such as c1-zaojunmiao-ns1)...




Current thread: