24 Sep
2011
24 Sep
'11
8:51 p.m.
On Sat, Sep 24, 2011 at 7:43 PM, Will Dean <will@willscorner.net> wrote: The "JOMAX.NET" response is indicative that there's a Paxfire box in the mix, intercepting the DNS query (probably installed by the ISP).
Anyone out there in Earthlink land? I am seeing what looks to be a cache poisoning attack on ns1.mindspring.com.
;; AUTHORITY SECTION: www.google.com. 65535 IN NS WSC2.JOMAX.NET. www.google.com. 65535 IN NS WSC1.JOMAX.NET.
-- -JH