attbi port blockage (DNS & attbi)

[bogstad at pobox.com (Bill Bogstad)]

>As you can see below, you are also DNS served as
>h00a0cc577ea7.ne.client2.attbi.com
>
>asgard.blu.org [1] dig h00a0cc577ea7.ne.client2.attbi.com
>
>...

	What is interesting though is that if you do a reverse lookup
(use the IP address to find hostname), the old (mediaone names) are
still being served.  I wonder if they'll remember to change that
before the final cutover.  People used to do reverse/forward lookups
and compare as a way to do hostname based authentication for network
security.  That's not done much anymore, but it might still cause
problems for a few people...

				Bill Bogstad
				bogstad at pobox.com

For example:


$ dig -x 66.30.65.125
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 4991
;; flags: qr aa rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 6, ADDITIONAL: 6

;; QUESTION SECTION:
;125.65.30.66.in-addr.arpa.	IN	PTR

;; ANSWER SECTION:
125.65.30.66.in-addr.arpa. 3600	IN	PTR	h00a0cc577ea7.ne.mediaone.net.

;; AUTHORITY SECTION:
65.30.66.in-addr.arpa.	3600	IN	NS	ns1.attbb.net.
65.30.66.in-addr.arpa.	3600	IN	NS	ns2.attbb.net.
65.30.66.in-addr.arpa.	3600	IN	NS	ns3.attbb.net.
65.30.66.in-addr.arpa.	3600	IN	NS	ns4.attbb.net.
65.30.66.in-addr.arpa.	3600	IN	NS	ns5.attbb.net.
65.30.66.in-addr.arpa.	3600	IN	NS	ns6.attbb.net.

....

;; Query time: 113 msec
;; SERVER: 24.218.0.228#53(24.218.0.228)
;; WHEN: Mon Mar  4 12:03:16 2002
;; MSG SIZE  rcvd: 296