DNS poisioning... ?

[noswal]

Just thought I'd post this here as well as little response in security section


My dns addresses are set to opendns settings.

If I use Dan kaminsky's site doxpara.com (who discovered dns poisoning) it says:

Your name server, at 196.2.97.14, appears vulnerable to DNS Cache Poisoning.
All requests came from the following source port: 32772

Due to events outside our control, details of the vulnerability have been leaked. Please consider using a safe DNS server, such as OpenDNS

----

The 196.2.97.14 is in the WBS (iburst) range 196.2.96.0 - 196.2.127.255
though my current ip with ibust is 41.208.19.1


If I do a speed test at dslreports.com it says my isp is rubixinfotech.com

so, is it an iburst problem?

 

[thisgeek]

Most likely. It's probably the reverse DNS that it's on about.. ie, the name your IP maps to.

 

[Raithlin]

Just a little note here: I had OpenDNS settings on my router, but iBurst's DNS server still took preference until I found a small-print wiki note for my router that told me to enter a command that forced the router to use the static hosts first.

Might that have caused your result, despite having OpenDNS configured?

 

[DJNgoma]

Thought poison only affected the unprotected. Will see if you speak true tales of truth, as soon as first get to my PC.