Have You Fixed Your Company's DNS Servers?

Security researcher Dan Kaminsky announced last week that a major bug affected DNS software

Security researcher Dan Kaminsky announced last week that a major bug affected DNS software, which translates human-usable domain names like "pcworld.com" into the IP addresses that computers use to find each other. DNS servers guide most all Internet traffic, and the odds are your company uses a number of such servers.

While the news on the flaw came out on the 8th, I know from experience how slow many companies can be to fix — or even discover — business-critical system flaws like these. So here's a quick way to tell if your company servers are at risk.

While browsing from a PC in your company network, head to Kaminsky's site and look for a button on the right named "Check My DNS." Click it. Easy, huh?

With luck, doing so reported (below the button) that your name server appears to be safe. If it didn't, then talk to your IT folks right away about patching your DNS servers. The US-CERT vulnerability report lists Cisco, Microsoft and Red Hat DNS implementations as vulnerable, along with many others.

This particular flaw is not yet under attack, but similar "cache poisoning" attacks have long been used to force anyone using a particular DNS server — which could mean your entire company — who attempts to visit any .com domain to an attack site instead, for instance. So be sure to patch your servers and get this fixed before you're targeted. Kaminsky took some heat initially for not providing corroborating evidence for his report, but has since received a peer-reviewed thumbs-up.

For the record, I use OpenDNS for my home network, and the company understandably crowed when they were not vulnerable to this flaw when it was first announced. OpenDNS offers a free service for home or business use.

For more details, see Kaminsky's site , along with a write-up from SecureWorks.

Join the Good Gear Guide newsletter!

Error: Please check your email address.
Rocket to Success - Your 10 Tips for Smarter ERP System Selection
Keep up with the latest tech news, reviews and previews by subscribing to the Good Gear Guide newsletter.

Erik Larkin

PC World (US online)
Show Comments

Most Popular Reviews

Latest Articles

Resources

PCW Evaluation Team

Matthew Stivala

HP OfficeJet 250 Mobile Printer

The HP OfficeJet 250 Mobile Printer is a great device that fits perfectly into my fast paced and mobile lifestyle. My first impression of the printer itself was how incredibly compact and sleek the device was.

Armand Abogado

HP OfficeJet 250 Mobile Printer

Wireless printing from my iPhone was also a handy feature, the whole experience was quick and seamless with no setup requirements - accessed through the default iOS printing menu options.

Azadeh Williams

HP OfficeJet Pro 8730

A smarter way to print for busy small business owners, combining speedy printing with scanning and copying, making it easier to produce high quality documents and images at a touch of a button.

Andrew Grant

HP OfficeJet Pro 8730

I've had a multifunction printer in the office going on 10 years now. It was a neat bit of kit back in the day -- print, copy, scan, fax -- when printing over WiFi felt a bit like magic. It’s seen better days though and an upgrade’s well overdue. This HP OfficeJet Pro 8730 looks like it ticks all the same boxes: print, copy, scan, and fax. (Really? Does anyone fax anything any more? I guess it's good to know the facility’s there, just in case.) Printing over WiFi is more-or- less standard these days.

Ed Dawson

HP OfficeJet Pro 8730

As a freelance writer who is always on the go, I like my technology to be both efficient and effective so I can do my job well. The HP OfficeJet Pro 8730 Inkjet Printer ticks all the boxes in terms of form factor, performance and user interface.

Michael Hargreaves

Windows 10 for Business / Dell XPS 13

I’d happily recommend this touchscreen laptop and Windows 10 as a great way to get serious work done at a desk or on the road.

Featured Content

Latest Jobs

Don’t have an account? Sign up here

Don't have an account? Sign up now

Forgot password?