another ISP screwing with us again... any thing we can do?

Kevin Darcy kcd at daimlerchrysler.com
Thu Mar 9 19:59:34 UTC 2000


Hmmm... Could screwing over one's own customers be considered a Denial of
Service attack? Or just Denial of Future Profit Potential?

I'm no lawyer, but it seems like their customers could sue them for breach of
contract (depending on the terms of the contract they signed, of course),
possibly with punitive damages if it could be proven to be deliberate and
malicious.

Unfortunately, there's not much technically that can be done here, short of
telling their customers to use different DNS servers (assuming that Net66
allows the DNS packets through).


- Kevin

Duane Cox wrote:

> Hello
>
> Our competitor, net66.com, has been constantly screwing around with us by
> creating fake zone files in their name servers
> so that any of their customers trying to email or get to our domains that we
> control, can not.
>
> What kind of action.. legal or not can I take?  Net66 is a PAIN in the butt
> to deal with and will not reverse the situation.
> They are doing it on purpose to piss us off..
>
> HERE IS SOME PROOF:
>
> [dcox at power dcox]$ dig ikth.com
>
> ; <<>> DiG 8.2 <<>> ikth.com
> ;; res options: init recurs defnam dnsrch
> dig ww;; got answer:
> ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 6
> ;; flags: qr aa rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 3, ADDITIONAL: 3
> ;; QUERY SECTION:
> ;;      ikth.com, type = A, class = IN
>
> ;; ANSWER SECTION:
> ikth.com.               12H IN A        209.35.164.224
>
> ;; AUTHORITY SECTION:
> ikth.com.               12H IN NS       dns1.interland.net.
> ikth.com.               12H IN NS       dns2.interland.net.
> ikth.com.               12H IN NS       dns3.interland.net.
>
> ;; ADDITIONAL SECTION:
> dns1.interland.net.     4H IN A         208.233.88.10
> dns2.interland.net.     4H IN A         208.233.88.15
> dns3.interland.net.     4H IN A         208.233.88.20
>
> ;; Total query time: 3998 msec
> ;; FROM: power.illicom.net to SERVER: default -- 12.15.125.5
> ;; WHEN: Thu Mar  9 09:30:52 2000
> ;; MSG SIZE  sent: 26  rcvd: 160
>
> [dcox at power dcox]$ nslookup
> Default Server:  dial-12-15-125-5.illicom.net
> Address:  12.15.125.5
>
> > server 12.15.125.5
> Default Server:  dial-12-15-125-5.illicom.net
> Address:  12.15.125.5
>
> > www.ikth.com
> Server:  dial-12-15-125-5.illicom.net
> Address:  12.15.125.5
>
> Name:    www.ikth.com
> Address:  209.35.164.224
>
> > set type=mx
> > ikth.com
> Server:  dial-12-15-125-5.illicom.net
> Address:  12.15.125.5
>
> Non-authoritative answer:
> ikth.com        preference = 5, mail exchanger = mail.ikth.com
>
> Authoritative answers can be found from:
> ikth.com        nameserver = dns1.interland.net
> ikth.com        nameserver = dns2.interland.net
> ikth.com        nameserver = dns3.interland.net
> mail.ikth.com   internet address = 209.35.135.190
> dns1.interland.net      internet address = 208.233.88.10
> dns2.interland.net      internet address = 208.233.88.15
> dns3.interland.net      internet address = 208.233.88.20
> >
>
> WHAT THEY ARE DOING...
>
> [dcox at power dcox]$ nslookup
> Default Server:  dial-12-15-125-5.illicom.net
> Address:  12.15.125.5
>
> > server kingman.net66.com
> Default Server:  kingman.net66.com
> Address:  206.139.80.68
>
> > www.ikth.com
> Server:  kingman.net66.com
> Address:  206.139.80.68
>
> Name:    ikth.com
> Address:  206.139.82.159
> Aliases:  www.ikth.com
>
> > set type=mx
> > ikth.com
> Server:  kingman.net66.com
> Address:  206.139.80.68
>
> ikth.com        preference = 5, mail exchanger = winslow.net66.com
> ikth.com        preference = 10, mail exchanger = kingman.net66.com
> ikth.com        nameserver = winslow.net66.com
> ikth.com        nameserver = kingman.net66.com
> winslow.net66.com       internet address = 63.250.64.65
> kingman.net66.com       internet address = 206.139.80.68
> >
>
> What can I do?
>
> Duane Cox
> dcox at coxnetwork.com






More information about the bind-users mailing list