Thursday

The BELNET CERT newletters and patched DNS servers in Belgium



The BELNET CERT has a newsletter to which you can subscribe here, or look at the archives here. I saw some interesting figures in there like 'most scanned ports'. I'm a bit curious to know which honeypots they used to make this analysis.
While their primary mission is to support the BELNET members (Belgian universities, public administrations, high schools and research centers connected to BELNET's network), you can contact them with issues. A full BE-CERT is in the making.

The preferred method to contact the CERT is by sending email at the address cert@belnet.be. Should you need to send confidential information to us, we urge you to use our PGP public key. Business hours for the BELNET CERT are 8am to 18pm during week days. Keep in mind that we are located in Brussels, Belgium. As such, our time zone is CET (GMT+0100 during winter, GMT+0200 during summer).

Almost all communication coming from the CERT should be digitally signed, either with the key for cert@belnet.be, either with the key for cert-advisory@belnet.be (only for our own advisories). We do not sign already-signed advisories that we forward, because the counter signature may mess with the original one.
I just hope that someone in Belgium is following up the DNS patching. Someone started an overview of patched servers on the forum of userbase.be.

0 comments: