nanog mailing list archives

Re: DNS poisoning at Google?


From: Michael J Wise <mjwise () kapu net>
Date: Tue, 26 Jun 2012 21:14:14 -0700


On Jun 26, 2012, at 9:07 PM, Ishmael Rufus wrote:

I'm glad I'm not the only one that miss this one:

http://www.csulb.edu

It is in his signature and email address as well ;)

The queries do seem to be taking a number of seconds, though, as opposed to being nearly instant when I reference the 
DNS servers of record directly.
The results I get at home (via SpeakEasy) all appear correct, though.

On Tue, Jun 26, 2012 at 11:04 PM, Sadiq Saif <sadiq () asininetech com> wrote:

Accidentally sent that to Matthew only,

mind sharing the domain name?

On Tue, Jun 26, 2012 at 11:53 PM, Matthew Black <Matthew.Black () csulb edu>
wrote:
Google Safe Browsing and Firefox have marked our website as containing
malware. They claim our home page returns no results, but redirects users
to another compromised website couchtarts.com.

We have thoroughly examined our root .htaccess and httpd.conf files and
are not redirecting to the problem target site. No recent changes either.

We ran some NSLOOKUPs against various public DNS servers and
intermittently get results that are NOT our servers.

We believe the DNS servers used by Google's crawler have been poisoned.

Can anyone shed some light on this?

matthew black
information technology services
california state university, long beach
www.csulb.edu<http://www.csulb.edu>




--
Sadiq S
O< ascii ribbon campaign - stop html mail - www.asciiribbon.org



Aloha,
Michael.
-- 
"Please have your Internet License             
 and Usenet Registration handy..."



Current thread: