Re: [Full-disclosure] what is DNS response that 255.255.255.255?

[mezgani ali <handrix@xxxxxxxxx>]

Hello,

Well, the blocklist  of IPv4 address is (0.0.0.0 - 255.255.255.255),
and the IPv4 defines many classes A,B,C,D,E, the address 255.255.255.255
reside in class E (240.0.0.0 - 255.255.255.255)
and that class should not be used on IP networks. it's just for experimental
purpose.

Anyway, the address 255.255.255.255 is a broadcast  that deliver message
from one sender to many recipients.
Sending a direct message to an IP broadcast for example to 255.255.255.255
indicate that all other nodes on LAN should receive that message.
You can send a broadcast ping on your LAN by typing:
$ ping -b 255.255.255.255
 That result all active target on you local network response to ping.



Best regards,


2009/3/17 김무성 <kimms@xxxxxxxxxxxxx>

>  Hello.
>
>
>
> I’m testing malware.
>
> It DNS query xxxxxxxxxxx.ods.org and xxxxxxxxx.daemon.sh
>
> And response is 255.255.255.255
>
>
>
> What is 255.255.255.255?
>
> Can DNS hosting company set that specific DNS name set to 255.255.255.255?
>
>
>
> _______________________________________________
> Full-Disclosure - We believe in it.
> Charter: http://lists.grok.org.uk/full-disclosure-charter.html
> Hosted and sponsored by Secunia - http://secunia.com/
>



-- 
Ali MEZGANI
Network Engineering/Security
http://securfox.blogspot.com/
http://www.secufox.org/

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/