DNS Cache Poisoning Attack warning

Hi Experts,

We recently upgraded a client to ESET Smart Security (ESS)  from ESET NOD32. Since then, every few days the client receives a warning from ESS saying, "Detected DNS Cache Poisoning Attack" and gives the IP address where the attack is being detected from, which is the IP address of the router.

I'm aware that some antivirus programs which can detect DNS cache poisoning attacks also give false positives. Any idea how I can tell the difference between positive and false-positive detections in this regard?
Servant-LeggieAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Pradeep DubeyConsultantCommented:
Hello,

Its antivirus issue see the below post and update your firewall.

"The erroneous "DNS cache poisoning attack" detections should be fixed in the next build of the firewall module (1072 probably). They used to occur when responses from a DNS server did not match queries."

http://www.wilderssecurity.com/showthread.php?t=307053
0
Pradeep DubeyConsultantCommented:
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
Servant-LeggieAuthor Commented:
Thanks, pradeep08_81. Will implement these changes over the next few days and advise on progress.
0
Servant-LeggieAuthor Commented:
Thanks, pradeep08_81, your solution did the trick! Thanks for patiently waiting for my reply.
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Anti-Virus Apps

From novice to tech pro — start learning today.