pidgin.im Misconfigured DNS

[Kevin Stange]

It's not like this is a major disclosure issue, because there are no
hosts in our zone that are "secret.  However, preventing access to
larger responses like AXFR does help reduce the chance that someone will
use our server for DNS reflection attacks on other hosts.  Disabling
AXFR outside of master/slave is also generally considered a best practice.

If there are no objections and no one else beats me to this, I can go
ahead and resolve this problem in a day or so.

On 11/07/2013 12:13 PM, Adrian Birsan wrote:
> Hello,
> 
> I would like to report a misconfigured DNS. Please check attached file
> containing details regarding the issue.
> 
> The NS allows zone transfer to any host, as you can see i was able to
> query the NS about pidgin.im, and your NS pop up all its infos.
> 
> In order to fix this, you must change "allow zone transfer" settings
> from "any" to "0.0.0.0" to not allow any zone transfer, or to any of
> your back up NS only. So the other people won't see all the information
> about your hosts!
> 
> Looking forward reading you!
> 
> regards
> Adrian
> 
> 
> _______________________________________________
> security mailing list
> security at pidgin.im
> http://pidgin.im/cgi-bin/mailman/listinfo/security
> 


-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 263 bytes
Desc: OpenPGP digital signature
URL: <http://pidgin.im/cgi-bin/mailman/private/security/attachments/20131107/2ff832f5/attachment.sig>