jsp-mystery by panniuniu

VIEWS: 3 PAGES: 4

									    Universität Bielefeld                                                      Peter Koch c




                                The JSPNRMPTGSBSSDIR Mystery


                                               Peter Koch

                            Department of Computer Science and Biotechnology
                                           Universität Bielefeld

                                      pk@TechFak.Uni-Bielefeld.DE




RIPE-29 DNS WG, 1998                    The JSPNRMPTGSBSSDIR Mystery                  1 of 4
    Universität Bielefeld                                                                                   Peter Koch c




                                                         Oddity Never Dies


                                    DNS queries for JSPNRMPTGSBSSDIR.acme-bv.xy hit
                                 




                                    authoritative server . . .

                                    . . . from deep inside (!) the domain
                                 




                                    (e.g. from dns.absurdia.acme-bv.xy) . . .
                                    . . . regularly for hours, every two minutes, some breaks at weekends
                                 




                                    unnecessary DNS traffic
                            ¡




                                    avoidable expenses (for customers)
                            ¡




RIPE-29 DNS WG, 1998                                    The JSPNRMPTGSBSSDIR Mystery                               2 of 4
    Universität Bielefeld                                                                  Peter Koch c



                                                  From Redmond With Love

                                Name announced by Windows NT Remote Access Service
                             




                                Queries follow DNS search path
                             




                                Purpose?
                             




                                unknown to the public – thus far
                                How to stop it?
                             




                                by workaraound only (?)
                                Want detailed evidence?
                             




                                – Windows NT Magazine, June 1997
                                – comp.protocols.smb, January 1998
                                – Microsoft database: PSS ID Number: Q150820, 10-08-1997

RIPE-29 DNS WG, 1998                                The JSPNRMPTGSBSSDIR Mystery                  3 of 4
    Universität Bielefeld                                                                  Peter Koch c




                                                     A View To A Cure

                                Catch the queries as early as possible
                             




                                Treat the mystery similar to localhost, i.e. create
                             




                                 – CNAME RR pointing to your Windows NT server
                                 – A RR with NT server’s IP address
                                 – A RR with dummy address
                                for owner JSPNRMPTGSBSSDIR in zones “hosting“ NT and RAS
                                servers
                                Check DNS resolving strategy and search path
                             




RIPE-29 DNS WG, 1998                                The JSPNRMPTGSBSSDIR Mystery                  4 of 4

								
To top