...

Dear colleagues,

rather nasty bogus info for NS.NIC.DDN.MIL is spreading, and your host already

Please be aware that there is bogus info for KAVA.NISC.SRI.COM. as well. Please look for address 223.184.64.35 which is given for KAVA.NISC.SRI.COM in addition to 192.33.33.24.

...

got it:

Hello Ruediger,

Try: dig -x 137.129.1.1 and then check your cache...

Even though you seem to accept commonly happening faults in German DNS configurations, this one is in France...

It took circa 30-40 minutes to get that fault to happen the first time after I restarted the dns server. Once I found that, French site, it is repeatable reliably :-( -- 5 minutes later, it seems I can't repeat that at all.. No, again... Now with "named -d 255", which gives somewhat more data.. There we are.

Yes, we definitely get the contamination from 137.129.150.2 ( xdata.cnrm.meteo.fr, DNS manager: company@ctidev.cnrm.meteo.fr )

I'm not quite sure whether this one is the origin of the bogus data. I just queried this host and it still has bogus data for NS.NIC.DDN.MIL and KAVA.NISC.SRI.COM.

/Matti Aarnio <mea@nic.funet.fi> Postmaster

Arnold Nipper nipper@xlink.net XLINK Hostmaster