Page 1 of 1

Verisign - .COM and .NET not as we know it...

Posted: Tue Sep 16, 2003 9:19 pm
by HM2K
Well since no one else posted it...

As of 15/09/2003 Verisign has assigned all unregistered .com and .net domains to the following IP: 64.94.110.11

It slowly began around 12am (GMT) when .net domains started to change over, shortly followed by .com domains as root-servers were updated.

IE:
* Dns resolved verisign-sucks.net to 64.94.110.11
* Dns resolved 64.94.110.11 to sitefinder-idn.verisign.com

Verisign basicly added an A record for *.com and *.net to 64.94.110.11

News can be found here: http://www.cbronline.com/latestnews/d04 ... 9c0018be8b
and here: http://slashdot.org/articles/03/09/16/0 ... =98&tid=99

Verisign will now be forwarding all unregistered domains to their website.

IE: http://sitefinder.verisign.com/lpc?url= ... -sucks.net

Shortly after this text file was posted with more information: http://www.deliver3.com/nanog.verisign.txt

Offical Verisign Documentation:

http://www.verisign.com/resources/gd/si ... tation.pdf
http://www.verisign.com/resources/gd/si ... ctices.pdf

A patch was released for BIND8 as a way to stop verisign: http://achurch.org/bind8-verisign-patch.txt

A bug in verisign's sitefinder script was found: http://sitefinder.verisign.com/lpc?url= ... /script%3E

asdf.dk released some comical images: http://asdf.dk/dearverisign.jpg http://asdf.dk/getaclueverisign.jpg

Posted: Tue Sep 16, 2003 11:29 pm
by Pills
Moved to off-topic.

Posted: Wed Sep 17, 2003 1:28 pm
by munky
the 'bug' posted has been somewhat patched. you can work around the patch with http://sitefinder.verisign.com/lpc?url= ... %3b%22.net

ISC Delegation Only patches are here: http://www.isc.org/products/BIND/delegation-only.html
nanog post wrote:> Anyone have a magic named.conf incantation to counter the verisign
> braindamage?

zone "com" { type delegation-only; };
zone "net" { type delegation-only; };

Posted: Thu Sep 18, 2003 4:05 am
by Auriga
Lame...

Truly lame.

Posted: Thu Sep 18, 2003 11:03 am
by prefect
One thing is cute about this is that major corporations and big isps all over the world are showing that they wont allow this. Several norwegian isps and the biggest .dk isp (afaik) have already patched their nameservers or nullrouted the ip and more follow each day.

I think we'll win this one.

Posted: Fri Sep 19, 2003 12:33 pm
by munky
http://lnks.us/?U0MRQZ
Popular Enterprises Files $100 Million Lawsuit against VeriSign Inc.

KNOXVILLE, Tenn.--(BUSINESS WIRE)--Sept. 18, 2003--Popular Enterprises LLC, the parent company of Netster.com, has filed a $100 million dollar lawsuit against VeriSign, Inc.
The Complaint alleges antitrust violations, unfair competition and violations of the Deceptive and Unfair Trade Practices Act based upon VeriSign's release of the http://sitefinder.verisign.com product.

Posted: Sat Sep 20, 2003 11:07 pm
by HM2K

Posted: Fri Oct 03, 2003 4:53 pm
by munky