[nsp-sec] List of vulnerable DNS resolvers

[Mike Tancsa]

At 07:11 PM 7/22/2008, Niels Provos wrote:

>You can find a list of vulnerable resolvers and corresponding AS numbers at:
>
>  https://asn.cymru.com/nsp-sec/upload/1216767459.whois.txt

ACK 11647.  Thanks, customers notified!

         ---Mike


>These IP addresses are from recursive resolvers that showed very low
>standard-deviation (<200) in their source ports according to
>measurements conducted by David Dagon and myself over the last 7 days.
>  I released a small Python tool that you can use to test your own
>resolver.   You can download it from:
>
>   http://www.monkey.org/~provos/dnspredict.py
>
>Instructions on how to use the tool can be found here:
>
>  http://www.provos.org/index.php?/archives/42-DNS-and-Randomness.html
>
>Please, let me know if you have any questions.
>
>Thank you,
>  Niels.
>
>
>_______________________________________________
>nsp-security mailing list
>nsp-security at puck.nether.net
>https://puck.nether.net/mailman/listinfo/nsp-security
>
>Please do not Forward, CC, or BCC this E-mail outside of the nsp-security
>community. Confidentiality is essential for effective Internet 
>security counter-measures.
>_______________________________________________