DNS SPOOFING?

View: New views
3 Messages — Rating Filter:   Alert me  

DNS SPOOFING?

by Jack Howarth :: Rate this Message:

Reply to Author | View Threaded | Show Only this Message

   I am finding that when I try to do 'fink selfupdate'
in cvs mode that the process fails with the following error...

usr/bin/su howarth -c 'cvs -q -z3 update -d -P -l'
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
@       WARNING: POSSIBLE DNS SPOOFING DETECTED!          @
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
The RSA host key for fink.cvs.sourceforge.net has changed,
and the key for the corresponding IP address 216.34.181.110
is unknown. This could either mean that
DNS SPOOFING is happening or the IP address for the host
and its host key have changed at the same time.
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
@    WARNING: REMOTE HOST IDENTIFICATION HAS CHANGED!     @
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
IT IS POSSIBLE THAT SOMEONE IS DOING SOMETHING NASTY!
Someone could be eavesdropping on you right now (man-in-the-middle attack)!
It is also possible that the RSA host key has just been changed.

Any ideas on what should be done to resolve this problem?
      Jack

-------------------------------------------------------------------------
This SF.Net email is sponsored by the Moblin Your Move Developer's challenge
Build the coolest Linux based applications with Moblin SDK & win great prizes
Grand prize is a trip for two to an Open Source event anywhere in the world
http://moblin-contest.org/redirect.php?banner_id=100&url=/
_______________________________________________
Fink-devel mailing list
Fink-devel@...
http://news.gmane.org/gmane.os.apple.fink.devel

Re: DNS SPOOFING?

by Alexander Hansen-2 :: Rate this Message:

Reply to Author | View Threaded | Show Only this Message


On Oct 4, 2008, at 3:12 PM, Jack Howarth wrote:

>   I am finding that when I try to do 'fink selfupdate'
> in cvs mode that the process fails with the following error...
>
> usr/bin/su howarth -c 'cvs -q -z3 update -d -P -l'
> @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
> @       WARNING: POSSIBLE DNS SPOOFING DETECTED!          @
> @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
> The RSA host key for fink.cvs.sourceforge.net has changed,
> and the key for the corresponding IP address 216.34.181.110
> is unknown. This could either mean that
> DNS SPOOFING is happening or the IP address for the host
> and its host key have changed at the same time.
> @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
> @    WARNING: REMOTE HOST IDENTIFICATION HAS CHANGED!     @
> @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
> IT IS POSSIBLE THAT SOMEONE IS DOING SOMETHING NASTY!
> Someone could be eavesdropping on you right now (man-in-the-middle  
> attack)!
> It is also possible that the RSA host key has just been changed.
>
> Any ideas on what should be done to resolve this problem?
>      Jack
>

The RSA host key has just been changed.  They didn't move the keys  
when they switched machines.

-------------------------------------------------------------------------
This SF.Net email is sponsored by the Moblin Your Move Developer's challenge
Build the coolest Linux based applications with Moblin SDK & win great prizes
Grand prize is a trip for two to an Open Source event anywhere in the world
http://moblin-contest.org/redirect.php?banner_id=100&url=/
_______________________________________________
Fink-devel mailing list
Fink-devel@...
http://news.gmane.org/gmane.os.apple.fink.devel

Re: DNS SPOOFING?

by David Reiser :: Rate this Message:

Reply to Author | View Threaded | Show Only this Message


On Oct 4, 2008, at 3:12 PM, Jack Howarth wrote:

>   I am finding that when I try to do 'fink selfupdate'
> in cvs mode that the process fails with the following error...
>
> usr/bin/su howarth -c 'cvs -q -z3 update -d -P -l'
> @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
> @       WARNING: POSSIBLE DNS SPOOFING DETECTED!          @
> @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
> The RSA host key for fink.cvs.sourceforge.net has changed,
> and the key for the corresponding IP address 216.34.181.110
> is unknown. This could either mean that
> DNS SPOOFING is happening or the IP address for the host
> and its host key have changed at the same time.
> @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
> @    WARNING: REMOTE HOST IDENTIFICATION HAS CHANGED!     @
> @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
> IT IS POSSIBLE THAT SOMEONE IS DOING SOMETHING NASTY!
> Someone could be eavesdropping on you right now (man-in-the-middle  
> attack)!
> It is also possible that the RSA host key has just been changed.
>
> Any ideas on what should be done to resolve this problem?
>      Jack
Sourceforge moved their server farm, but not the ssh keys. Delete the  
sourceforge line in ~/.ssh/known_hosts, do whatever verification of  
keys/fingerprints you deem necessary, and accept the new keys on the  
next selfupdate.

Dave
--
David Reiser
dbreiser@...





-------------------------------------------------------------------------
This SF.Net email is sponsored by the Moblin Your Move Developer's challenge
Build the coolest Linux based applications with Moblin SDK & win great prizes
Grand prize is a trip for two to an Open Source event anywhere in the world
http://moblin-contest.org/redirect.php?banner_id=100&url=/
_______________________________________________
Fink-devel mailing list
Fink-devel@...
http://news.gmane.org/gmane.os.apple.fink.devel
LightInTheBox - Buy quality products at wholesale price!