中国DNS污染通过根服务器影响全世界

来源:百度文库 编辑:超级军网 时间:2024/05/03 10:42:36


要想人不知除非己莫为 被人抓小辫子了

Ars Technica报道,据IETF DNS operations邮件列表的讨论,一位来自智利域名注册商的技术人员周三称,他们在DNS根服务器“i.root-servers.net”的一个节点上观察到了奇怪的响应行为,当用户查询fac/ebook.com、yout/ube.com和 twit/ter.com等域名时,返回的是虚假的IP地址,没有转到.com。正常情况下,DNS根服务器只会提供一个正确的顶级域名服务器指示,在此例中用户查询的.com顶级域名服务器由美国弗吉尼亚州的VeriSign公司运行。他们根据路由追踪发现这个节点位于中国。i.root-servers.net的一位工作人员表示正对此展开调查。很多人指出中国根服务器DNS污染已经发生过多次,而一位自称管理根服务器中国镜像的CNNIC机构的人员声明,CNNIC与此事无关。

原文:http://arstechnica.com/tech-poli ... mp;utm_campaign=rss

CNNIC(中国网络信息中心)有关人员回应:https://lists.dns-oarc.net/piper ... 0-March/005280.html

[dns-operations] Odd behaviour on one node in I root-server (facebook, youtube & twitter)
Xiaodong Lee lee at cnnic.cn
Thu Mar 25 01:38:49 UTC 2010
--------------------------------------------------------------------------------
Dear All,
As the local host of the mirror site of I root server which was agreed
by I root server administrator, and also as the ".CN" registry which is
one of the members of DNS community, we wanna clarify that CNNIC never
did any interceptions or other things for the mirror site of I root
serer, CNNIC only provides the stable Internet connection, power and
necessary hand support.

Best Regards,

Xiaodong Lee
VP&CTO, CNNIC
+86-10-58813020
mailto: lee at cnnic.cn
--------------------------------------------------------------------------------

关键字: DNS污染

要想人不知除非己莫为 被人抓小辫子了

Ars Technica报道,据IETF DNS operations邮件列表的讨论,一位来自智利域名注册商的技术人员周三称,他们在DNS根服务器“i.root-servers.net”的一个节点上观察到了奇怪的响应行为,当用户查询fac/ebook.com、yout/ube.com和 twit/ter.com等域名时,返回的是虚假的IP地址,没有转到.com。正常情况下,DNS根服务器只会提供一个正确的顶级域名服务器指示,在此例中用户查询的.com顶级域名服务器由美国弗吉尼亚州的VeriSign公司运行。他们根据路由追踪发现这个节点位于中国。i.root-servers.net的一位工作人员表示正对此展开调查。很多人指出中国根服务器DNS污染已经发生过多次,而一位自称管理根服务器中国镜像的CNNIC机构的人员声明,CNNIC与此事无关。

原文:http://arstechnica.com/tech-poli ... mp;utm_campaign=rss

CNNIC(中国网络信息中心)有关人员回应:https://lists.dns-oarc.net/piper ... 0-March/005280.html

[dns-operations] Odd behaviour on one node in I root-server (facebook, youtube & twitter)
Xiaodong Lee lee at cnnic.cn
Thu Mar 25 01:38:49 UTC 2010
--------------------------------------------------------------------------------
Dear All,
As the local host of the mirror site of I root server which was agreed
by I root server administrator, and also as the ".CN" registry which is
one of the members of DNS community, we wanna clarify that CNNIC never
did any interceptions or other things for the mirror site of I root
serer, CNNIC only provides the stable Internet connection, power and
necessary hand support.

Best Regards,

Xiaodong Lee
VP&CTO, CNNIC
+86-10-58813020
mailto: lee at cnnic.cn
--------------------------------------------------------------------------------

关键字: DNS污染


输出和谐价值观了
他们要能 为 就好了= =
自己国内都经常处理不好
吃洋葱,看youtube的人表示毫无压力
看你们的裤叉有多红!
中国是是时候在国内建一些根服务器了,不然不利于本国的安全,at&t都审查所有的亚太光缆过来的信息了,我们是不是也该主动出击防止恐怖主义阿
中国是是时候在国内建一些根服务器了
还是希望他们劫持DNS,总比哪一天开始劫持人来的好.本人代表天朝网民表示感觉良好,生活完全不受影响!
只要不耽误下载好孩子视频就ok啦{:se:}
最求自己的国家利益没啥错,反正美帝从来没打算善待咋。
看来局域网指日可待啊。
某单身:不上yout没所谓,偶尔能下几部av就好,国家利益为重
从我自己来说当然希望能无限制看AV,但从下一代成长的角度说又希望国家要严格管理,矛盾啊

PS:我家的小崽子才两岁半就会用鼠标打开链接,关闭窗口了,据俺爹娘讲,当年我这个岁数时跟傻子也差不多,现在的小孩真是后生可畏啊
表示没有影响、且情绪稳定
大林 发表于 2010-3-28 21:24

和我儿子一样。还知道开机关机。
DNS污染问题发生后中国关闭根服务器

中国的DNS污染通过DNS根服务器波及到了智利和美国等国的计算机,目前中国的根服务器镜像已经与国际互联网切断连接。
中国根服务器运营商Netnod,似乎已经解决了导致facebook.com、youtube.com和 twitter.com等网站域名解析无意定向到中国的问题。维护根服务器中国镜像的Netnod,“撤回了中国服务器的路由通告”,从而有效的切断了与互联网的连接。Netnod坚称,它的服务器不包含重定向互联网流量的错误数据,安全专家对此也表示认同,他们认为DNS问题可能是中国政府修改某处网络时造成的。

After DNS problem, Chinese root server is shut down

The server is thought to have extended Chinese filtering technology to Chile and the US
by Robert McMillan
2 comments | 17I like it!

March 26, 2010, 08:10 PM —  IDG News Service —  
A China-based root DNS server associated with networking problems in Chile and the U.S. has been disconnected from the Internet.

The action by the server's operator, Netnod, appears to have resolved a problem that was causing some Internet sites to be inadvertently censored by a system set up in the People's Republic of China.

On Wednesday, operators at NIC Chile noticed that several ISPs (Internet service providers) were providing faulty DNS information, apparently derived from China. China uses the DNS system to enforce Internet censorship on its so-called Great Firewall of China, and the ISPs were using this incorrect DNS information.

That meant that users of the network trying to visit Facebook, Twitter and YouTube were directed to Chinese computers instead.

In Chile, ISPs VTR, Telmex and several others -- all of them customers of upstream provider Global Crossing -- were affected, NIC Chile said in a statement on Friday. The problem, first publicly reported on Wednesday, appears to have persisted for a few days before it was made public, the statement says.

A NIC Chile server in California was also hit with the problem, NIC Chile said. While it's not clear how this server was getting the bad DNS information, it came via either Network Solutions or Equinix, according to NIC Chile.

Network Solutions wasn't to blame as it does not offer backbone provider services to NIC Chile, said Rick Wilhelm, the company's vice president of engineering. Equinix and Global Crossing could not immediately be reached for comment.

Netnod, which maintains a copy of its root DNS server in China, has now "withdrawn route announcements" made by the server, according to company CEO Kurt Lindqvist. This effectively disconnects the server from the Internet. In an e-mail interview, Lindqvist said he could not recall when his company took this action.

Netnod insists that its server did not contain the bad data that redirected Internet traffic, and security experts agree, saying that its data was probably being altered by the Chinese government somewhere on China's network, in order to enforce the country's Great Firewall.
撤回了中国服务器的路由通告”,从而有效的切断了与互联网的连接

这下国外想访问国内网站也要出问题了
qnxchina 发表于 2010-3-29 14:28
{:wuyu:}说不定是美帝自己在根服务器上面装木马把土鳖的镜像服务器当肉鸡。
吃饱了等饿 发表于 2010-3-28 21:04


    分捞人走
兵熊 发表于 2010-3-30 00:15


TG境内的根镜像本来就是美国公司给建立的,要装木马直接就搞了,还费啥劲
这件事感觉到很丢人。