nsupdate and Microsoft DNS Server

G

Guest

Guest
Archived from groups: microsoft.public.win2000.dns (More info?)

Hi,

We just find out that the nsupdate utility can add and delete any
record on our DNS Server running on Windows 2000 SP4.

How can I prevent this?

Thanks
 
G

Guest

Guest
Archived from groups: microsoft.public.win2000.dns (More info?)

Make it an AD zone type and set Update to Secure only. I think this is
avail in Windows 2000. Need have AD naturally.

--
William Stacey, MVP

"Itsd" <itsd2001@hotmail.com> wrote in message
news:6e41ded2.0408040950.315c527d@posting.google.com...
> Hi,
>
> We just find out that the nsupdate utility can add and delete any
> record on our DNS Server running on Windows 2000 SP4.
>
> How can I prevent this?
>
> Thanks
 
G

Guest

Guest
Archived from groups: microsoft.public.win2000.dns (More info?)

In news:6e41ded2.0408040950.315c527d@posting.google.com,
Itsd <itsd2001@hotmail.com> made a post then I commented below
> Hi,
>
> We just find out that the nsupdate utility can add and delete any
> record on our DNS Server running on Windows 2000 SP4.
>
> How can I prevent this?
>
> Thanks

Nsupdate is a trojan that's associated with those porn site autodialers. See
here:
http://www.liutilities.com/products/wintaskspro/processlibrary/nsupdate/

I suggest to run Adaware 60 from www.lavasoftusa.com , it's freeware. The
Pro version has a utility called As-watch that prevents this from happening
again. Make sure you update the definition file prior to running Adaware.
The instructions are pretty easy to follow.

I would also suggest to perform a full antivirus scan and keep your
antivirus definitions upto date.

--
Regards,
Ace

Please direct all replies ONLY to the Microsoft public newsgroups
so all can benefit.

This posting is provided "AS-IS" with no warranties or guarantees
and confers no rights.

Ace Fekay, MCSE 2003 & 2000, MCSA 2003 & 2000, MCSE+I, MCT, MVP
Microsoft Windows MVP - Windows Server - Directory Services

Security Is Like An Onion, It Has Layers
HAM AND EGGS: A day's work for a chicken;
A lifetime commitment for a pig.
--
=================================
 
G

Guest

Guest
Archived from groups: microsoft.public.win2000.dns (More info?)

Not to be confused with nsupdate.exe (name server update) from the Bind
builds with does what it says.

--
William Stacey, MVP

"Ace Fekay [MVP]"
<PleaseSubstituteMyActualFirstName&LastNameHere@hotmail.com> wrote in
message news:ex#eyxmeEHA.2812@tk2msftngp13.phx.gbl...
> In news:6e41ded2.0408040950.315c527d@posting.google.com,
> Itsd <itsd2001@hotmail.com> made a post then I commented below
> > Hi,
> >
> > We just find out that the nsupdate utility can add and delete any
> > record on our DNS Server running on Windows 2000 SP4.
> >
> > How can I prevent this?
> >
> > Thanks
>
> Nsupdate is a trojan that's associated with those porn site autodialers.
See
> here:
> http://www.liutilities.com/products/wintaskspro/processlibrary/nsupdate/
>
> I suggest to run Adaware 60 from www.lavasoftusa.com , it's freeware. The
> Pro version has a utility called As-watch that prevents this from
happening
> again. Make sure you update the definition file prior to running Adaware.
> The instructions are pretty easy to follow.
>
> I would also suggest to perform a full antivirus scan and keep your
> antivirus definitions upto date.
>
> --
> Regards,
> Ace
>
> Please direct all replies ONLY to the Microsoft public newsgroups
> so all can benefit.
>
> This posting is provided "AS-IS" with no warranties or guarantees
> and confers no rights.
>
> Ace Fekay, MCSE 2003 & 2000, MCSA 2003 & 2000, MCSE+I, MCT, MVP
> Microsoft Windows MVP - Windows Server - Directory Services
>
> Security Is Like An Onion, It Has Layers
> HAM AND EGGS: A day's work for a chicken;
> A lifetime commitment for a pig.
> --
> =================================
>
>
 
G

Guest

Guest
Archived from groups: microsoft.public.win2000.dns (More info?)

In news:uLLseppeEHA.704@TK2MSFTNGP09.phx.gbl,
William Stacey [MVP] <staceywREMOVE@mvps.org> made a post then I commented
below
> Not to be confused with nsupdate.exe (name server update) from the
> Bind builds with does what it says.
>
>

Whoops... big difference! Well, prob that's what he's talking about...
THanks for the correction.


--
Regards,
Ace

Please direct all replies ONLY to the Microsoft public newsgroups
so all can benefit.

This posting is provided "AS-IS" with no warranties or guarantees
and confers no rights.

Ace Fekay, MCSE 2003 & 2000, MCSA 2003 & 2000, MCSE+I, MCT, MVP
Microsoft Windows MVP - Windows Server - Directory Services

Security Is Like An Onion, It Has Layers
HAM AND EGGS: A day's work for a chicken;
A lifetime commitment for a pig.
--
=================================