[App_rpt-users] Network wide outage and Security Alert

[Bryan Fields]

Allstarlink is having a network wide outage starting about 6pm EST/2300 UTC.

The registration services are down, and all web services are down.  It appears
the dns glue records at the .org servers have been re-pointed to different
servers.
$ dig ns allstarlink.org.  @b2.org.afilias-nst.org.


;; QUESTION SECTION:
;allstarlink.org.		IN	NS

;; AUTHORITY SECTION:
allstarlink.org.	86400	IN	NS	tony.ns.cloudflare.com.
allstarlink.org.	86400	IN	NS	evelyn.ns.cloudflare.com.


Prior to this they were:
allstarlink.org.	2445	IN	NS	dirtyparrot.digiflux.org.
allstarlink.org.	2445	IN	NS	caustic-sea.allstarlink.org.
allstarlink.org.	2445	IN	NS	ns2.afraid.org.

This effectively changed the entire allstarlink.org DNS to point to a
different set of servers which returns bunk data.

example:
$ dig register.allstarlink.org.
;; QUESTION SECTION:
;register.allstarlink.org.	IN	A

;; ANSWER SECTION:
register.allstarlink.org. 60	IN	CNAME	allstarlink.org.
allstarlink.org.	60	IN	A	34.105.111.212

This is a security problem as your registrations is being passed to an unknown
server.  You need to take immediate action and modify your nodes to not
register to register.allstarlink.org.


-- 
Bryan Fields

727-409-1194 - Voice
http://bryanfields.net

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: OpenPGP digital signature
URL: <http://lists.keekles.org/pipermail/app_rpt-users/attachments/20201229/058038b3/attachment.sig>