Via Tia Wood’s blog:
I posted a thread a couple weeks ago about a DNS security hole which received no response from domainers. Perhaps I should have explained that it totally disables your ability to earn revenue from affiliates and parking programs, if effected.
Oh, and it doesn’t need your consent nor trip any alarms of any kind and rendors your firewalls, usernames and passwords completely useless, not to mention it doesn’t need your ISP, hosting server or domain company’s permission to do what it wants with your domain.
(More here from The Register: Patched DNS servers still vulnerable to cache poisoning, Published Monday 11th August 2008 )
What to do? Monitor your traffic and revenue closely. Follow industry blogs/forums. In addition, for Portfolio Help members, we have web security experts available via email 24/7 to answer all your questions, concerns, in regard to this and other web security issues.
Cheers,
Sahar
This is a quick way to check your DNS if safe or not:
http://my.king.net/2008/08/dns-cross-pollination-check.html
Cheers,
EM @ KING.NET
You can’t poison a non-existent dns cache. Turn recursion off on any DNS Servers that are reachable from the cloud.
Great post Sahar.
All domain name owners should be reading this article.