This page was exported from phaq [ http://phaq.phunsites.net ]

Export date:Sat Apr 20 13:58:15 2024 / +0000 GMT

___________________________________________________


Title: DrayTek Vigor 2600v does some DNS spoofing

---------------------------------------------------


I always wondered about an obscure behaviour observed in my home network.

Whenever I access my website using it's plain domain name (http://phunsites.net), I'd end up with a password prompt from my DSL router.







Thinking about DNS it would be an easy asumption that there was likely to be a wrong resource record like this in my DNS zone:


@ IN A 192.0.2.1


But it turned there wasn't - why should it anyway?
Looking further into this, I did a DNS trace. It was strinking that querying for www.phunsites.net would yield another result ... 


$ dig A www.phunsites.net.

;  DiG 9.6.0-APPLE-P2  A www.phunsites.net.
;; global options: +cmd
;; Got answer:
;; ->>HEADERHEADERHEADERHEADER

---------------------------------------------------


Images: http://phaq.phunsites.net/files/2011/04/draytek1-300x157.png

http://phaq.phunsites.net/files/2011/04/draytek2-300x251.png

http://phaq.phunsites.net/files/2011/04/draytek3-300x101.png



---------------------------------------------------




---------------------------------------------------


Post date: 2011-04-05 13:34:43

Post date GMT: 2011-04-05 12:34:43

Post modified date: 2011-04-05 13:34:43

Post modified date GMT: 2011-04-05 12:34:43



____________________________________________________________________________________________


Export of Post and Page as text file has been powered by [ Universal Post Manager ] plugin from www.gconverters.com