You might think that's pretty far fetched but I had a "situation" recently, after installing DNS on my own win2k server, I found performance dragging a bit and it was getting harder to stay connected.
Turns out, I had taken over as the primary DNS server for my ISP in this area
Several hundred thousand connections a day were being made through me
I'm really amazed I never got a call on that one but I guess it might have lightened the load on their DNS?
how can that happen? how did you find out that their primary dns server was changed to yours?Originally posted by balamm@26 December 2003 - 04:31
Turns out, I had taken over as the primary DNS server for my ISP in this area
Several hundred thousand connections a day were being made through me
<span style='color:black'> I am a part of all that I have met - Lord Tennyson</span>
<span style='color:blue'>Try not to let your mind wander...it is too small and fragile to be out by itself</span>
It was a fluke chance that I ran ipconfig /all, netstat -a, and a few other utilities all at once. Normally I would only be checking the system security, event, and W3SVC logs for activity.
I was A bit shocked at what I saw. Thousands of same gateway or same netblock IPs connecting every hour! I Couldn't figure out why or what they would all be after at first.
I started checking processes and when I stopped DNS, The connections trickled off. When I restarted it, they slowly picked up again.
Our system is a bit strange though, everyone on this ISP is really on one huge lan. Any server that answers a dns query can become one of the DNS servers. If the primary or secondary become slow, or don't have the required info, others take over.
So the ISP and every client on the netblock see my DNS server as equal to/no different from the dns server in edmonton or vancouver. No certificates are required to run DNS services and I'm already authenticated for every other service on this ISP.
I think on the day I caught it, my DNS cache was somewhere over 500mb!
I have a feeling their are some ISP vulnerabilities associated with this setup but it's unexploited so far.
Can ISP's see what sites you visit and what you download?
Poster
@ Robert00000, you prbably could but i think the fastest data tranfer for wireless atm is like 50mbs
@ spike_055, yeah i got told that they have logs of everything you do
They can but they can't usually be bothered. It's when you piss someone off that you need to worry.
Posting Permissions
Reply With Quote
Bookmarks