Lots of small business use the DNS from an ISP, etc. I know some of the ones in my area and people i've consulted for that have their own router in their office, use private ip addresses (192.168.x.x, etc) but an outside DNS server. Most DNS servers can be reached from the public network, so what would stop someone from sending a request for a private network IP to the DNS server in question?
For example, lets say there's a server on 192.168.1.1 in some guy's office. The router is set up to possibly masqurade, but allow a full connection to the ISP's DNS from the local server. Now using this concept, you could send a packet into the DNS requesting 192.168.1.1. The DNS server (i believe) will send it straight into the private network.
By my logic, you can basically make a VPN though anyone's private DNS.
Slashdot Mirror
I've got a thought to bounce off of all of you:
Lots of small business use the DNS from an ISP, etc. I know some of the ones in my area and people i've consulted for that have their own router in their office, use private ip addresses (192.168.x.x, etc) but an outside DNS server. Most DNS servers can be reached from the public network, so what would stop someone from sending a request for a private network IP to the DNS server in question?
For example, lets say there's a server on 192.168.1.1 in some guy's office. The router is set up to possibly masqurade, but allow a full connection to the ISP's DNS from the local server. Now using this concept, you could send a packet into the DNS requesting 192.168.1.1. The DNS server (i believe) will send it straight into the private network.
By my logic, you can basically make a VPN though anyone's private DNS.
--Justin
As a matter of fact, if you read the footer notes for the article Mr. Moody wrote, you'll see the reasons of his statements.
It matter of factly says that he wrote the book:
"I Sing the Body Electronic: A Year with Microsoft on the Multimedia Frontier".
Now if that doesn't show bias i don't know what could.
--Justin