<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	>
<channel>
	<title>Comments on: intermittent dns issues not affecting entire network</title>
	<atom:link href="http://itknowledgeexchange.techtarget.com/itanswers/intermittent-dns-issues-not-affecting-entire-network/feed/" rel="self" type="application/rss+xml" />
	<link>http://itknowledgeexchange.techtarget.com/itanswers/intermittent-dns-issues-not-affecting-entire-network/</link>
	<description></description>
	<pubDate>Mon, 09 Nov 2009 12:14:35 +0000</pubDate>
	<generator>http://wordpress.org/?v=2.6.2</generator>
		<item>
		<title>By: astronomer</title>
		<link>http://itknowledgeexchange.techtarget.com/itanswers/intermittent-dns-issues-not-affecting-entire-network/#comment-46968</link>
		<dc:creator>astronomer</dc:creator>
		<pubDate>Mon, 02 Jul 2007 19:44:16 +0000</pubDate>
		<guid isPermaLink="false">#comment-46968</guid>
		<description>Malware could definitely have done it. You would be shocked and disturbed at what is now happening with javascript. 
I watched a demo where the presenter uploaded script to an IIS server, downloaded it with an innocent client, (just by clicking on the link), and compromised the client. He installed a keylogger and showed the recent common websites visited. After this he showed, on his hack server, the username and password used for the ecommerce site. Then he scanned the local net, found the DSL modem, and cracked it using the manufacturers default admin and password.
This is the next big vulnerability area.
rt</description>
		<content:encoded><![CDATA[<p>Malware could definitely have done it. You would be shocked and disturbed at what is now happening with javascript.<br />
I watched a demo where the presenter uploaded script to an IIS server, downloaded it with an innocent client, (just by clicking on the link), and compromised the client. He installed a keylogger and showed the recent common websites visited. After this he showed, on his hack server, the username and password used for the ecommerce site. Then he scanned the local net, found the DSL modem, and cracked it using the manufacturers default admin and password.<br />
This is the next big vulnerability area.<br />
rt</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: kfettig</title>
		<link>http://itknowledgeexchange.techtarget.com/itanswers/intermittent-dns-issues-not-affecting-entire-network/#comment-46969</link>
		<dc:creator>kfettig</dc:creator>
		<pubDate>Mon, 02 Jul 2007 17:42:41 +0000</pubDate>
		<guid isPermaLink="false">#comment-46969</guid>
		<description>Thank you, astronomer. I never thought to compare DNS servers, and sure enough, the machines that weren't working were pointing to a different DNS server. I don't believe that anyone changed those settings. Could malware have done it? I can't tell you how appreciative I am, as well as the people this problem was affecting! Everything is working fine now. 

Thank you!</description>
		<content:encoded><![CDATA[<p>Thank you, astronomer. I never thought to compare DNS servers, and sure enough, the machines that weren&#8217;t working were pointing to a different DNS server. I don&#8217;t believe that anyone changed those settings. Could malware have done it? I can&#8217;t tell you how appreciative I am, as well as the people this problem was affecting! Everything is working fine now. </p>
<p>Thank you!</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: astronomer</title>
		<link>http://itknowledgeexchange.techtarget.com/itanswers/intermittent-dns-issues-not-affecting-entire-network/#comment-46970</link>
		<dc:creator>astronomer</dc:creator>
		<pubDate>Mon, 02 Jul 2007 14:55:22 +0000</pubDate>
		<guid isPermaLink="false">#comment-46970</guid>
		<description>Gary had a good idea about checking the hosts file, but I suggest you use nslookup on both working and non-working systems. Are they getting information from the same DNS server? If the systems are the same, they should get identical information. If they do, and there are still differences, I world suspect redirection or similar malware causes.
rt</description>
		<content:encoded><![CDATA[<p>Gary had a good idea about checking the hosts file, but I suggest you use nslookup on both working and non-working systems. Are they getting information from the same DNS server? If the systems are the same, they should get identical information. If they do, and there are still differences, I world suspect redirection or similar malware causes.<br />
rt</p>
]]></content:encoded>
	</item>
</channel>
</rss>
<!-- dynamic -->