MaraDNS 1.4.04 released

Sam Trenholme strenholme.usenet at gmail.com
Tue Aug 3 18:16:27 EDT 2010


>>> Oops. Avira reports BDS/Backdoor.Gen in link

>> It’s a false positive.

> Avira is known to have many false positives.

A summary of this false positive is here:

http://www.avira.com/en/threats/section/details/id_vir/4075/bds_backdoor.gen.html

It’s called a “Backdoor server” and the test is described as “A
generic detection routine”.  It probably flags anything with bind() or
CreateService() in it.

As an aside, resolving avira.com is a good torture test for Deadwood:

* There are for upstream name servers for avira.com

* Two of the upstram name servers are glueless

* One of the two glueless names points to a NXDOMAIN, not an IP

* Only one of the four upstream servers (the other glueless one)
actually replies to DNS queries.

- Sam


More information about the list mailing list