04-20-2026, 12:58 PM
Nameserveri Ministarstva spoljnih poslova ns1.mfa.gov.rs (194.247.204.2) i ns2.mfa.gov.rs (194.247.204.3) imaju ranjivost u konfiguraciji; rekurzija je omogućena za sve, što znači da se svi domeni razrešavaju sa ovih servera, uključujući domene za koje nisu autoritarni.
Loš primer (DNS Ministarstva spoljnih poslova) [nije autoritaran za Google a vraća odgovor]:
Dobar primer (DNS gov.rs) [nije autoritaran za Google i vraća kôd REFUSED bez odgovora]:
Loš primer (DNS Ministarstva spoljnih poslova) [nije autoritaran za Google a vraća odgovor]:
Code:
luka@luka3630:~/.ssh$ dig google.com A @ns1.mfa.gov.rs +noall +answer +comments
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 44415
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4000
;; ANSWER SECTION:
google.com. 5 IN A 216.58.205.142
luka@luka3630:~/.ssh$ dig google.com A @ns2.mfa.gov.rs +noall +answer +comments
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 24305
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4000
;; ANSWER SECTION:
google.com. 291 IN A 216.58.205.142Dobar primer (DNS gov.rs) [nije autoritaran za Google i vraća kôd REFUSED bez odgovora]:
Code:
luka@luka3630:~/.ssh$ dig google.com A @ns1.gov.rs +noall +answer +comments
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: REFUSED, id: 29144
;; flags: qr rd; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 1
;; WARNING: recursion requested but not available