[Venis33]

Nameserveri Ministarstva spoljnih poslova ns1.mfa.gov.rs (194.247.204.2) i ns2.mfa.gov.rs (194.247.204.3) imaju ranjivost u konfiguraciji; rekurzija je omogućena za sve, što znači da se svi domeni razrešavaju sa ovih servera, uključujući domene za koje nisu autoritarni.

Loš primer (DNS Ministarstva spoljnih poslova) [nije autoritaran za Google a vraća odgovor]:

Code:

luka@luka3630:~/.ssh$ dig google.com A @ns1.mfa.gov.rs +noall +answer +comments ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 44415 ;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 1 ;; OPT PSEUDOSECTION: ; EDNS: version: 0, flags:; udp: 4000 ;; ANSWER SECTION: google.com.        5    IN    A    216.58.205.142 luka@luka3630:~/.ssh$ dig google.com A @ns2.mfa.gov.rs +noall +answer +comments ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 24305 ;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 1 ;; OPT PSEUDOSECTION: ; EDNS: version: 0, flags:; udp: 4000 ;; ANSWER SECTION: google.com.        291    IN    A    216.58.205.142

Dobar primer (DNS gov.rs) [nije autoritaran za Google i vraća kôd REFUSED bez odgovora]:

Code:

luka@luka3630:~/.ssh$ dig google.com A @ns1.gov.rs +noall +answer +comments ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: REFUSED, id: 29144 ;; flags: qr rd; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 1 ;; WARNING: recursion requested but not available