[Dshield] Odd DNS name, slightly OT

Jens Knoell jens at ing.twinwave.net
Fri Oct 26 21:18:58 GMT 2001


You can point a DNS to pretty much anything you want. The DNS server itself
has no idea about public and private IP.

Chances are that the owner of the Domain uses it for internal stuff as well,
it's totally legit.

Jens

----- Original Message -----
From: "David Sentelle" <David.Sentelle at cnbcbank.com>
To: <dshield at dshield.org>
Sent: Friday, October 26, 2001 2:11 PM
Subject: [Dshield] Odd DNS name, slightly OT


>
> I was browsing the web pages users on our network had requested, and saw a
website called inbound.registeredsite.com.  This address resolves to
64.255.255.131, which is to my knowledge a valid IP address.
>
> However, when I see URLs that don't answer web requests, I usually chop
off the third level part of the DNS name and replace it with 'WWW', which
left me browsing to www.registeredsite.com.  Oddly enough, this resolves to
10.0.0.1 which I am sure is a private IP.  I didn't even know that DNS
servers would resolve DNS names to private IPs.
>
> Registeredsite.com is owned by Network Solutions.  How would they benefit
from pointing people to a private IP address?  Does it conform to the DNS
RFCs to associate a private IP to a public DNS server?
>
> TIA―
>
> ----------------------------------------
> David Sentelle
> Network Operations Specialist
> Commerce National Bank
> 614.334.6282 Voice    614.848.8830 Fax
>
>
> This e-mail and any files transmitted with it are confidential and
intended solely for the use of the individual or entity to which they are
addressed. If you have received this e-mail in error, please notify
admin at cnbcbank.com and delete it from your system.
>
> _______________________________________________
> Dshield mailing list
> Dshield at dshield.org
> To change your subscription options (or unsubscribe), see:
http://www1.dshield.org/mailman/listinfo/dshield
>




More information about the list mailing list