nanog mailing list archives

Re: Need help in flushing DNS


From: chip <chip.gwyn () gmail com>
Date: Thu, 20 Jun 2013 11:59:00 -0400

I don't think there's one recognized authority.  However,
https://isc.sans.edu/ is pretty up to date.

--chip


On Thu, Jun 20, 2013 at 11:53 AM, Paul Ferguson <fergdawgster () gmail com>wrote:

I'm sure that folks in the ICANN SSAC will be talking about this
subject well in to the future once a postmortem is completed. Also,
perhaps even the DNS-OARC community.

Coordination? This is the Internet!  :-)

- ferg

On Thu, Jun 20, 2013 at 8:49 AM, Phil Fagan <philfagan () gmail com> wrote:

Is there an organization that coordinates outages like this amongst the
industry?


On Thu, Jun 20, 2013 at 9:36 AM, Frank Bulk <frnkblk () iname com> wrote:

Some news coverage here with pretty pictures of LinkedIn access:


http://techcrunch.com/2013/06/19/linkedin-outage-due-to-possible-dns-hijacki
ng/<
http://techcrunch.com/2013/06/19/linkedin-outage-due-to-possible-dns-hijacking/


Frank

-----Original Message-----
From: Jimmy Hess [mailto:mysidia () gmail com]
Sent: Thursday, June 20, 2013 1:23 AM
To: Paul Ferguson
Cc: NANOG list
Subject: Re: Need help in flushing DNS

On 6/20/13, Paul Ferguson <fergdawgster () gmail com> wrote:
On Wed, Jun 19, 2013 at 10:44 PM, Tom Paseka <tom () cloudflare com>
wrote:
On Wed, Jun 19, 2013 at 10:32 PM, Patrick W. Gilmore

I think  "ztomy.com"  smells really bad for some reason, looks like
100% advertising;
sure doesn't "appear" to be a DNS hosting provider,  I sure can't
imagine two major domains  entering incorrect  authoritative
nameserver list changes on the same day...

http://www.dailychanges.com/ztomy.com/#transferred-in

"The domain ztomy.com was registered on November 22, 2007, and we have
nameserver history going back to December 9, 2007. It is listed as a
nameserver for 182,174 domains
Currently displaying 50 of 1,602 domain names transferred into
ztomy.com on June 19, 2013."


<patrick () ianai net>wrote:
On Jun 20, 2013, at 01:30 , Grant Ridder <shortdudey123 () gmail com>
wrote:
Yelp is evidently also affected
Not from here.
Patrick:
$ dig NS yelp.com @8.8.8.8 +short
ns1620.ztomy.com.
ns2620.ztomy.com.

--
-JH







--
Phil Fagan
Denver, CO
970-480-7618



--
"Fergie", a.k.a. Paul Ferguson
 fergdawgster(at)gmail.com




-- 
Just my $.02, your mileage may vary,  batteries not included, etc....


Current thread: