dns hack/poison?

MiCr0

Hi All,
a bit of an odd situation here.
i attempted to load my gmail this morning, via a bookmark i have in firefox
but it gave me a 404 - which is odd

C:\Documents and Settings\lmidmr\Desktop>tracert gmail.google.com
Tracing route to seeker.monster.com [208.71.197.13]
over a maximum of 30 hops:
1 * * * Request timed out.
2 * * * Request timed out.
3 * * * Request timed out.
4 * * * Request timed out.
5 * * * Request timed out.

C:\Documents and Settings\lmidmr\Desktop>nslookup gmail.google.com
Server: ns-res1.tcy.stisp.net
Address: 84.203.254.34

Non-authoritative answer:
Name: www3.l.google.com
Addresses: 66.102.9.102, 66.102.9.101, 66.102.9.100
Aliases: gmail.google.com

same result with ie and firefox.

using smart telecom smartvision

any ideas?
MiCr0

MiCr0

and a flush of dns seems to have resolved it :-)

irishpartyboy

Out of curiousity, have you since checked your hosts file? modified date and/or any erroneous entries?

C:\WINDOWS\system32\drivers\etc\hosts

B

MiCr0

nope - it was blank
spyware and anti-virus scans came back clear too

irishpartyboy

http://mauriziostorani.wordpress.com/2008/07/09/dan-kaminsky-bug-in-dns/

seamus

Were you looking at monster.com recently?

Looks just like a corrupt DNS cache to me tbh

FruitLover

I'd run Dan Kaminsky's vuln checker on it if I were you (www.doxpara.com).

And/or switch to OpenDNS (208.67.222.222, 208.67.220.220) - these are known to be patched.