full-disclosure - Zone transfers, a spammer's dream?

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

From: etomcat at freemail.hu (Feher Tamas)
Subject: Zone transfers, a spammer's dream?  

Panix as ISP's name nicked, transported to Australia
by Nick Farrell, 17 Jan 2005

ONE OF the oldest commercial ISPs in the Big Apple claimed
it had its domain name 'nicked' on Friday by an Australian
outfit. According to the Sydney Morning Herald, here, the
ownership of panix.com was moved to a company in Australia
called MelbourneIT.

The actual DNS records were moved to a company in the United
Kingdom, and panix.com's mail has was redirected to yet
another company in Canada.

According to Panix the Australian company, MelbourneIT, had
given the name back and the global internet registry and
domain name servers are now showing the correct information.

However, due to the distributed nature of the internet
domain name system, it will take four to 24 more hours
before the false data from the "hijacking" expired and is
discarded by the various name servers, the site said.

However, the word hijack might not have been a fair comment.
The panix.com domain was registered by MelbourneIT 'fair
dinkum' through a reseller. Its CEO Theo Hnarakis, said he
had not heard of Panix until he was contacted on Sunday.
Then he found out that Panix existed and he handed the
domain back.

It looks like Panix might have been one of the more
prominent outfits to fall foul of new rules relating to the
transfer of domains which came into effect in November.

Under these rules requests for transferring a domain are
automatically approved in five days unless they are denied
by the owner of the domain.

If the contact addresses given in the records were incorrect
then a request for transfer would go to a wrong address and
after five days of no response, the transfer would become
effective.