ISP fake result

Barry Margolin barmar at alum.mit.edu
Mon Jul 26 23:27:41 UTC 2004


In article <ce3koi$27ib$1 at sf1.isc.org>, samsouk <samsouk at noos.fr> 
wrote:

> Hello,
> 
> my isp is returning a fake address for non-existant domain names
> 
> ------------------------------------
> host xsxsxsxsxsxsxsxsxsxsxs.com 194.117.200.10
> Using domain server:
> Name: 194.117.200.10
> Address: 194.117.200.10#53
> Aliases:
> 
> xsxsxsxs.com has address 82.97.10.68
> ------------------------------------
> 
> this dns (194.117.200.10) is always returning 82.97.10.68 wich is the 
> address of a web-server. The isp says it is to help customers (!!!)
> 
> I have bind-9.2.2 on my local network, acting as a caching nameserver.
> Is it possible to filter these results (replacing 82.97.10.68 with a 
> 'not-found' result) ?

If you're forwarding to the ISP's nameserver, don't.  Your caching 
server will perform its own iterative lookup and do what you want 
(unless the ISP has implemented a transparent redirect to their 
nameservers).

-- 
Barry Margolin, barmar at alum.mit.edu
Arlington, MA
*** PLEASE post questions in newsgroups, not directly to me ***


More information about the bind-users mailing list