On Sat, 2003-08-16 at 17:34, nward(a)esphion.com wrote: [snip]
daork(a)hermes daork $ host -t a windowsupdate.com alien.xtra.co.nz Using domain server: Name: alien.xtra.co.nz Addresses: 202.27.184.3
windowsupdate.com has address 204.79.188.11 windowsupdate.com has address 204.79.188.12 daork(a)hermes daork $ host -t soa windowsupdate.com alien.xtra.co.nz Using domain server: Name: alien.xtra.co.nz Addresses: 202.27.184.3
windowsupdate.com start of authority alien.xtra.co.nz soa.xtra.co.nz( 2003150807 ;serial (version) 10800 ;refresh period 3600 ;retry refresh this often 360000 ;expiration period 1800 ;minimum TTL ) </paste>
Now thats just plain un-cool. This was not the case yesterday when I tried alien and terminator for windowsupdate.com I don't thing.
That can't be right, what's soa.xtra.co.nz doing in there? Has Xtra become authoritative for windowsupdate.com with a serial number much higher than Microsoft's and still serving A records after MS have taken them down? I figuring most DNS systems will eventually disregard it as undelegated, but still there's something odd going on. -- Kerry Thompson, CISSP IT Security Consultant Auckland, New Zealand http://www.crypt.gen.nz