Are Plesk users behind N.A.T. still vulnerable to DNS cache poisoning after patching?

[dynamicnet]

Greetings:

Upon reading http://www.theregister.co.uk/2008/08/06/kaminsky_black_hat/ it appears those who use network address translation may be vulnerable to DNS cache poisoning even after patching their DNS servers.

"another 15 per cent are still vulnerable to some extent because they use network address translation gear that prevents the patch from working."

Thoughts?

Thank you.

 

[prowler318]

Take a look at the following articles:

(https://www.kb.cert.org/CERT_WEB\services\vul-notes.nsf/id/800113)
(http://www.cipherdyne.org/blog/2008/07/mitigating-dns-cache-poisoning-attacks-with-iptables.html)


Tools to test for this:

(https://www.dns-oarc.net/oarc/services/dnsentropy)
(https://www.dns-oarc.net/oarc/services/porttest)
(http://www.doxpara.com/)

Prowler318