12/14/2008

Dexia.be dns problems found ?

We haven't been scanning or penetrationtesting the infrastructure, we have only used some online services to have a view on some problems that may exist - if the information in these services is correct. We didn't use any software on our pc to do that.

Reverse lookup does not match nameserver's hostname

http://dynamicnetworkservices.com/report/?domain=dexia.be

result : good for phishers because it creates confusing

Recursive-Queries:
ns1.dexia.com. NO - recursive queries denied!
ns11.dexia.com. YES - recursive queries allowed!

http://serversniff.net/nsreport.php 

result ; we didn't see this with all the tests on different sites and we see in the graph of the infrastructure that there are two big nameservers that play probably a loadbalancing role so maybe this only happens with that server and maybe only with some tests, but it shouldn't in anycase. You are a bank and you are responsable and as the 10 cracked accounts have shown, you shouldn't take any risk.

  Domain dexia.be has only one mail-server (comment : I  hope that you in reality have some backup standby which means you can't contact the securitypeople at the bank by mail)

http://www.checkdns.net/quickcheck.aspx?detailed=1&or...

22:03 | Permalink | Comments (0) | Email this | |  del.icio.us | | Digg! Digg |  Facebook

Post a comment