nanog mailing list archives
Re: DNS hijack?
From: Jim <mysidia () gmail com>
Date: Sat, 13 Nov 2021 09:21:56 -0600
On Fri, Nov 12, 2021 at 6:38 PM Robert L Mathews <lists () tigertech com> wrote:
I didn't see the page, but for what it's worth, this is governed by this ICANN policy:> https://www.icann.org/resources/pages/errp-2013-02-28-en
It is common that registrars repoint nameservers and redirect web traffic when a domain's renewal has not been paid for (during 45-day grace period provided by the registry), probably more registrars do that than not. The issue here is not with the expired domain, thus not addressed by that ICANN policy... The ICANN policy addresses interrupting the resolution path and redirecting Web traffic for expiring domains; there's nothing about other services on those domains such as DNS when the expired domain has a backup nameserver host of a non-expired domain. In this case, interrupting the resolution path would be fine (In case the non-expired domain have other nameservers), But the redirection causes DNS instability and failures for domains that are not expired, even if those domains have other nameservers, and the non-expired domains get redirected to a web page falsely stating that they are expired. -- -JH
Current thread:
- DNS hijack? Jeff Shultz (Nov 11)
- Re: DNS hijack? Jeff Shultz (Nov 11)
- Re: DNS hijack? Stephane Bortzmeyer (Nov 12)
- Re: DNS hijack? Stephane Bortzmeyer (Nov 11)
- Re: DNS hijack? Jeff Shultz (Nov 11)
- Re: DNS hijack? William Herrin (Nov 12)
- Re: DNS hijack? Matthew Petach (Nov 12)
- Re: DNS hijack? Jeff Shultz (Nov 12)
- Re: DNS hijack? Robert L Mathews (Nov 12)
- Re: DNS hijack? Jim (Nov 13)
- Re: DNS hijack? Jeff Shultz (Nov 11)
- Re: DNS hijack? Jeff Shultz (Nov 11)
- Re: DNS hijack? Stephane Bortzmeyer (Nov 12)
- Re: DNS hijack? Jeff Shultz (Nov 12)
- Re: DNS hijack? Jim (Nov 12)
- Re: DNS hijack? Rubens Kuhl (Nov 12)
- Re: DNS hijack? William Herrin (Nov 12)
- Re: DNS hijack? Stephane Bortzmeyer (Nov 13)
- Re: DNS hijack? Nick Hilliard (Nov 13)