RE: pharming.. dns cache insertion...

oh.. come on barry!!

if it was easy, anybody could do it!!! akamai figured out how to essentially
map the internet traffic in real time... surely this couldn't be that much
harder!!!

note the humour!! but seriously, how might it be done...

as a basic question, how many dns servers are we talking about if we simply
constrain it to the dns servers that are exposed...

has anybody ever researched this???

-bruce


-----Original Message-----
From: bind-users-bounce@isc.org [mailto:bind-users-bounce@isc.org]On
Behalf Of Barry Margolin
Sent: Friday, April 08, 2005 5:24 PM
To: comp-protocols-dns-bind@isc.org
Subject: Re: pharming.. dns cache insertion...


In article <d36rn1$31cf$1@sf1.isc.org>,
"bruce" <bedouglas@earthlink.net> wrote:

> brad,
>
> doh! hence the question!!!!!
>
> i got to thinking about this after your 1st email... my basic question
was,
> is there a list/compilation of valid IP addresses, taking into account
that
> the list is completely dynamic.. has anyone tried to compile such a list?
> how the hell would you even do it?
>
> my understanding of DNS, and the ancillary issues is quite limited, as
i've
> never really had to immerse myself into it...

It's not really feasible. You would have to crawl the entire DNS
hierarchy, because delegations can be made at any level. This requires
listing the contents of each zone, but many nameservers restrict who can
list them.

--
Barry Margolin, barmar@alum.mit.edu
Arlington, MA
*** PLEASE post questions in newsgroups, not directly to me ***