Is Your DNS Patched?

re: Is Your DNS Patched?

rodney.buike — Fri, 25 Jul 2008 20:22:39 GMT

Some additional information has been posted by Microsoft today in regards to this.

http://www.microsoft.com/technet/security/advisory/956187.mspx

re: Is Your DNS Patched?

Sean Kearney — Fri, 25 Jul 2008 21:39:45 GMT

Rodney.

Going to get hot on it. Does this also apply to internal DNS servers that are merely caching queries and are firewalled off from the internet? (IE: Small business sites, we don't use Live DNS, but the ISP is our Live DNS for hosting, so yeah THEY better be patched!)

re: Is Your DNS Patched?

rodney.buike — Fri, 25 Jul 2008 22:45:16 GMT

If you find your upstream DNS servers are not patched you can point your DNS forwarders to the OpenDNS servers.

http://www.opendns.com/

re: Is Your DNS Patched?

rodney.buike — Fri, 25 Jul 2008 23:40:04 GMT

Hey Sean,

It applies to all DNS servers. Even if your internal DNS servers are patched, you still need to ensure that your upstream DNS servers are patched. You can use Dan's tool to determine that they are, or point to OpenDNS for the time being.

re: Is Your DNS Patched?

Mitch — Sat, 26 Jul 2008 00:37:49 GMT

Rodney, you said "you can use Dan's tool to determine" if your upstream DNS servers are patched. Where can I find this tool?

re: Is Your DNS Patched?

rodney.buike — Sat, 26 Jul 2008 22:02:15 GMT

Hi Mitch,

Top right corner of Dan's page, www.doxpara.com