Path: utzoo!utgpu!news-server.csri.toronto.edu!cs.utexas.edu!sdd.hp.com!wuarchive!emory!sol.ctr.columbia.edu!trantor.harris-atd.com!mlb.semi.harris.com!thrush.mlb.semi.harris.com!del
From: del@thrush.mlb.semi.harris.com (Don Lewis)
Newsgroups: comp.protocols.tcp-ip.domains
Subject: Re: Bogus address for TERP.UMD.EDU root nameserver floating about
Message-ID: <1990Nov6.233011.8276@mlb.semi.harris.com>
Date: 6 Nov 90 23:30:11 GMT
References: <9011061638.AA19042@sayshell.umd.edu>
Sender: news@mlb.semi.harris.com
Distribution: inet
Organization: Harris Semiconductor, Melbourne FL
Lines: 30
Nntp-Posting-Host: thrush.mlb.semi.harris.com

In article <9011061638.AA19042@sayshell.umd.edu> louie@SAYSHELL.UMD.EDU ("Louis A. Mamakos") writes:
>
>I've noticed a bunch of errors being reported by our Proteon router
>which connected UMDNET to SURANET, and thus the rest of the Internet.
>There is a packet flux for packets being transmitted to 128.8.26.90.
>
>Hmm.. I think, this is pretty strange.  TERP.UMD.EDU, which is one of
>the root name servers, has an address which is fairly similar:
>128.8.10.90.  I guess that the bogus address is the "MILNET" version
>of TERP's "ARPANET" flavored address..  Really weird.
>
>Bouncing name server queries to the hosts in question indicate that
>they have an incorrect idea of what TERP.UMD.EDU's IP address is.

We haven't seen this show up here yet, but we are suffering from some
other cache corruption.  One of IRS.GOV's purported name servers told
our name server that LBL.GOV is a root server, and it also looks like
we picked up the address 128.20.1.2 for AOS.BRL.MIL from the same source.
Somewhere along the way we also picked up the address 192.52.195.0
for NS.NASA.GOV.

Unfortunately our automatic bogon detector only tosses out root servers
named .ARPA, and logs the rest.  It doesn't report new (and bogus)
addresses for the root servers.

If BIND only did a better job of conforming to section 7.4 in RFC-1035...
-- 
Don "Truck" Lewis                      Harris Semiconductor
Internet:  del@mlb.semi.harris.com     PO Box 883   MS 62A-028
Phone:     (407) 729-5205              Melbourne, FL  32901