Date: Tue, 17 Mar 2009 11:57:41 +0000
From: mezgani ali <handrix@...il.com>
To: ±è¹«¼º <kimms@...osec.co.kr>
Cc: full-disclosure@...ts.grok.org.uk
Subject: Re: what is DNS response that 255.255.255.255?

Hello,

Well, the blocklist  of IPv4 address is (0.0.0.0 - 255.255.255.255),
and the IPv4 defines many classes A,B,C,D,E, the address 255.255.255.255
reside in class E (240.0.0.0 - 255.255.255.255)
and that class should not be used on IP networks. it's just for experimental
purpose.

Anyway, the address 255.255.255.255 is a broadcast  that deliver message
from one sender to many recipients.
Sending a direct message to an IP broadcast for example to 255.255.255.255
indicate that all other nodes on LAN should receive that message.
You can send a broadcast ping on your LAN by typing:
$ ping -b 255.255.255.255
 That result all active target on you local network response to ping.



Best regards,


2009/3/17 ±è¹«¼º <kimms@...osec.co.kr>

>  Hello.
>
>
>
> I¡¯m testing malware.
>
> It DNS query xxxxxxxxxxx.ods.org and xxxxxxxxx.daemon.sh
>
> And response is 255.255.255.255
>
>
>
> What is 255.255.255.255?
>
> Can DNS hosting company set that specific DNS name set to 255.255.255.255?
>
>
>
> _______________________________________________
> Full-Disclosure - We believe in it.
> Charter: http://lists.grok.org.uk/full-disclosure-charter.html
> Hosted and sponsored by Secunia - http://secunia.com/
>



-- 
Ali MEZGANI
Network Engineering/Security
http://securfox.blogspot.com/
http://www.secufox.org/

Content of type "text/html" skipped

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

Powered by blists - more mailing lists