[GTER] nasa.gov

Frederico A C Neves fneves at registro.br
Tue Feb 17 18:33:41 -03 2004


Igor,

Esta interface que vc está utilizando, testa somente a autoridade do
servidor para uma zona. www.nasa.gov não é uma zona, somente um CNAME
para a rede de distribuição de conteúdo do site da nasa. Teste
novamente para o domínio nasa.gov. A resposta deverá ser correta.

Domínio nasa.gov
DNS 198.116.144.33
  Autoridade sobre o domínio
   2004021702
  Tempo de resposta -> 0.22 s

Da rede do registro.br, aparentemente, não existe restrição
alguma. 

[]s
Fred

> dig @192.77.84.32 www.nasa.gov any
; <<>> DiG 8.3 <<>> @192.77.84.32 www.nasa.gov any 
; (1 server found)
;; res options: init recurs defnam dnsrch
;; got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 51217
;; flags: qr aa rd; QUERY: 1, ANSWER: 1, AUTHORITY: 3, ADDITIONAL: 3
;; QUERY SECTION:
;;      www.nasa.gov, type = ANY, class = IN

;; ANSWER SECTION:
www.nasa.gov.           10M IN CNAME    www.nasa.gov.speedera.net.

;; AUTHORITY SECTION:
nasa.gov.               10M IN NS       NASANS1.nasa.gov.
nasa.gov.               10M IN NS       NASANS4.nasa.gov.
nasa.gov.               10M IN NS       NASANS3.nasa.gov.

;; ADDITIONAL SECTION:
NASANS1.nasa.gov.       10M IN A        192.77.84.32
NASANS4.nasa.gov.       10M IN A        198.116.144.33
NASANS3.nasa.gov.       10M IN A        198.116.144.49

;; Total query time: 174 msec
;; FROM: registro.br to SERVER: 192.77.84.32
;; WHEN: Tue Feb 17 18:21:17 2004
;; MSG SIZE  sent: 30  rcvd: 183


> dig @a.speedera.net. www.nasa.gov.speedera.net. any

; <<>> DiG 8.3 <<>> @a.speedera.net. www.nasa.gov.speedera.net. any 
; (1 server found)
;; res options: init recurs defnam dnsrch
;; got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 20651
;; flags: qr rd; QUERY: 1, ANSWER: 2, AUTHORITY: 13, ADDITIONAL: 13
;; QUERY SECTION:
;;      www.nasa.gov.speedera.net, type = ANY, class = IN

;; ANSWER SECTION:
www.nasa.gov.speedera.net.  2M IN A  63.209.221.237
www.nasa.gov.speedera.net.  2M IN A  64.156.240.45

...

;; Total query time: 166 msec
;; FROM: registro.br to SERVER: 208.185.54.61
;; WHEN: Tue Feb 17 18:22:10 2004
;; MSG SIZE  sent: 43  rcvd: 491


> traceroute -q 1 www.nasa.gov
 1  bb (200.160.2.1)  0.510 ms
 2  ge-0-3-0.0.gw01.registro.br (200.160.0.228)  0.710 ms
 3  ge-1-3-0.0.gw02.registro.br (200.160.0.130)  0.611 ms
 4  200.228.125.21 (200.228.125.21)  1.350 ms
 5  ebt-G4-0-core03.spo.embratel.net.br (200.230.219.208)  1.517 ms
 6  ebt-P5-0-intl03.spo.embratel.net.br (200.230.0.161)  1.050 ms
 7  so-2-3.hsa1.Miami1.Level3.net (64.156.8.1)  133.290 ms
 8  ge-6-0-0.mp2.Miami1.Level3.net (64.159.0.17)  133.339 ms
 9  so-0-1-0.bbr1.Atlanta1.Level3.net (64.159.1.45)  133.565 ms
10  ge-10-0.hsa2.Atlanta1.Level3.net (64.159.1.254)  133.582 ms
11  unknown.Level3.net (63.209.216.222)  133.711 ms
12  unknown.Level3.net (63.209.221.237)  133.433 ms

On Tue, Feb 17, 2004 at 06:06:25PM -0300, Igor Silva wrote:
> 
> Ops. Sorry...
> Estava simulando um outro teste.. O correto é:
> 
> 
> 
> Domínio www.nasa.gov
> DNS 192.77.84.32
>   Erro no DNS
>    0
>   Tempo de resposta -> 0.17 s
> 
> 
> Domínio www.nasa.gov
> DNS 198.116.144.49
>   Erro no DNS
>    0
>   Tempo de resposta -> 0.17 s
> 
> 
> Domínio www.nasa.gov
> DNS 198.116.144.33
>   Erro no DNS
>    0
>   Tempo de resposta -> 0.22 s
>  
>  
> 
> Abs,
> Igor Silva
> Security Team
> igor_silva at optiglobe.com.br
...
> 
> > Em 17-02-2004 17:38, Allan Oliveira escreveu:
> >
> > >Pessoal,
> > >
> > >Mais alguém está enfrentando dificuldades para resolver o domínio da
> > >nasa (www.nasa.gov) ?
> > >
> > >
> > >
> > Não
> >
> >
> > [cuenco at tabajara cuenco]$ nslookup
> > Note:  nslookup is deprecated and may be removed from future releases.
> > Consider using the `dig' or `host' programs instead.  Run nslookup with
> > the `-sil[ent]' option to prevent this message from appearing.
> >  > www.nasa.gov
> > Server:         200.187.164.8
> > Address:        200.187.164.8#53
> >
> > Non-authoritative answer:
> > www.nasa.gov    canonical name = www.nasa.gov.speedera.net.
> > Name:   www.nasa.gov.speedera.net
> > Address: 208.254.18.144
> > Name:   www.nasa.gov.speedera.net
> > Address: 209.133.111.141



More information about the gter mailing list