Comments on: NSA.gov Hosed? http://asert.arbornetworks.com/2008/05/nsagov-hosed/ A weblog dedicated to educating the community on security threats that matter Mon, 06 Oct 2008 20:11:18 +0000 http://wordpress.org/?v=abc By: Danny McPherson http://asert.arbornetworks.com/2008/05/nsagov-hosed/#comment-121906 Danny McPherson Thu, 22 May 2008 02:02:50 +0000 http://asert.arbornetworks.com/?p=249#comment-121906 Most of the stuff (e.g., traceroute probes) to those IPs is filtered at the ingress of the NCSC network just after it leaves the ISP network. Routing was fine to there, but there was no visibility or response after those hops. Apparently it wasn't just a DNS process crash issue or the like, as the http server running on one of the boxes was also unreachable. HTH, -danny Most of the stuff (e.g., traceroute probes) to those IPs is filtered at the ingress of the NCSC network just after it leaves the ISP network. Routing was fine to there, but there was no visibility or response after those hops. Apparently it wasn’t just a DNS process crash issue or the like, as the http server running on one of the boxes was also unreachable. HTH, -danny

]]> By: Paul D. Parisi http://asert.arbornetworks.com/2008/05/nsagov-hosed/#comment-121660 Paul D. Parisi Wed, 21 May 2008 17:38:56 +0000 http://asert.arbornetworks.com/?p=249#comment-121660 Danny, Did you happen to do any traceroutes to the NS IP's during the outage? If so were they reachable? So was it that the machines were unreachable or was the DNS zone broken? Paul. Danny,

Did you happen to do any traceroutes to the NS IP’s during the outage? If so were they reachable? So was it that the machines were unreachable or was the DNS zone broken?

Paul.

]]> By: Update: DNS trouble knocks NSA off Internet | InfoWorld | News | 2008-05-15 | By Robert McMillan, IDG News Service http://asert.arbornetworks.com/2008/05/nsagov-hosed/#comment-118797 Update: DNS trouble knocks NSA off Internet | InfoWorld | News | 2008-05-15 | By Robert McMillan, IDG News Service Thu, 15 May 2008 23:55:36 +0000 http://asert.arbornetworks.com/?p=249#comment-118797 [...] Web site was unreachable because of a problem with the NSA's DNS servers, said Danny McPherson, chief research officer with Arbor Networks. [...] [...] Web site was unreachable because of a problem with the NSA’s DNS servers, said Danny McPherson, chief research officer with Arbor Networks. [...]

]]>