tomcat-users mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Christopher Schultz <ch...@christopherschultz.net>
Subject Re: DNS is hijacked and some filty AD is added at the bottom of our webpage
Date Wed, 09 Sep 2015 20:16:57 GMT
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Willem,

On 9/9/15 12:54 PM, Willem van Zyl wrote:
> Use dnssec.

Is it possible for a server to force the use of DNSSEC? Just like
X.509, you need to have a chain of trust between the client and the
server, and if your ISP or OS doesn't support DNSSEC, then you can't
benefit.

- -chris

> On Wed, Sep 9, 2015 at 8:13 AM -0700, "shi"
> <tomcat_shili@126.com<mailto:tomcat_shili@126.com>> wrote:
> 
> Hi gurus,
> 
> We have a website running at a tomcat. Its web pages looks good.
> 
> Recently, we, however, find some of web pages contain the filthy AD
> at the bottom of the page.
> 
> We really could not understand why there are these filthy AD at the
> web page. We make sure the web page doesn't contain any ADs at
> tomcat. But when we access these webpage via internet, we find
> these filthy AD added..
> 
> We search related knowledge and find it looks like some DNS is
> hijacked. It causes when the client is accessing the website, the
> hijacked DNS will be used to translate the webname to  its IP.
> During this process, the hijacked DNS adds the filthy AD at the web
> page.
> 
> So my current question is: how to avoid/resolve this issue at java
> server side? Are there many good solutions to resolve it?
> 
> 
> Thanks, Shi
> 
-----BEGIN PGP SIGNATURE-----
Comment: GPGTools - http://gpgtools.org

iQIcBAEBCAAGBQJV8JO5AAoJEBzwKT+lPKRYIEwP/i9aMbfCeS+YSXi6CBVpvtXi
Qr93tff50GHXsFFaI4jgqSM75/9O2Z2LmZy2OqmwaDK/scVL2ogQmUiubsNDymUI
xzU3d0zEzcjHZBhkF0XtlwqTqsJp/sx+x08Lk8Ye487EYvr1WTgQj7No22oAUtFK
ucwT697SH9YD4CB2q1PcyOwW88eOr+zjsgymyr7qDmEKXWPRW2oi0/BqAAFBtkZk
w+VTfhf8vOrRZHFDiG9Fl+rPLbepFzQbXsmVD/l4uzNJmCp/ndVISZZ2K9p29Hhu
EkbBNCyZHPv7uUl2ncyOl/FI7G1G3O+S4Q+piZ+clLXA0KB3Epe1wRXuXxUO8yGC
ub3BnMuuV9zqkzzYs0CCX1UU38EtY6AOXZRiSH8kBJz5HMi6RRJFNMl7zeFrajMC
bWJUbUDPiqC9q4slrZ/kAYX5DD5SEoP0GsEA64mFBgV04mGDtny19LX/4ahpN/A4
DJIf9Mqy83yA4e3/NxBwwdNmscyU4DfD8MxA3tt9cNOWmvkBCreyCCPiWlEL/VBL
OUwqO4+EtWE6dkAkobrkrn8KTWeF/obM0FTBZKFqVqYcRlgagDV4MFZwgfQPjRTh
gxpjQJtfnC3br9eEOMe0LBuFeTTAu57RsM8nkYWay75hHuo2f7BATopjjJ+Wd0Ia
GwO8/9QGJnDwGyM9vKR6
=QOAa
-----END PGP SIGNATURE-----

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org


Mime
View raw message