CircleID

I have discovered that VeriSign's SiteFinder service breaks Microsoft's Outlook and Microsoft's Outlook Express email readers as well as many of the standard Windows Networking Utilities by providing misleading error messages, temporary lockups, and incorrect status information.

Breaking MS Outlook

If a user misspells a domain name in their POP3 or SMTP server name, Outlook no longer provides meaningful error messages to a user to help them understand and fix the problem.

Here is the standard message from Outlook for a misspelled domain name in a POP3 or SMTP server name:

Task 'pop.rcn.com - Sending and Receiving' reported error (0x800CCC0D) : 'Unable to find the e-mail server. Please verify the server information in your account properties.'

With SiteFinder turned on, here's what happens:

[POP]
Task 'pop.rcn.com - Sending and Receiving' reported error (0x80042108) : 'Outlook is unable to connect to your incoming (POP3) e-mail server. If you continue to receive this message, contact your server administrator or Internet service provider (ISP).'

[SMTP]
Your message did not reach some or all of the intended recipients. The following recipient(s) could not be reached:

'rms@computerbytesman.com' on 9/20/2003 3:04 PM 550 : Client host rejected: The domain you are trying to send mail to does not exist.

The error message for the SMTP domain misspelling is the worse of the two, because the error message states that the domain name in the email address is bad and not the domain name of the SMTP email server.

Breaking Outlook Express

If a user misspells a domain name in their POP3 or SMTP server name, Outlook Express no longer provides meaningful error messages to a user to help them to fix the problem.

Similar problems may exist in other email readers and other Internet-enabled software. This Outlook Express problem raises questions about what kind of testing VeriSign did to understand the collateral damage to application software from the SiteFinder service before the service was turned on. Clearly Web browsers aren't the only software in the world that do DNS lookups.

Here are the expected error messages in Outlook Express for a misspelled domain name:

The host 'smtp.rcntypodomain.us' could not be found. Please verify that you have entered the server name correctly. Account: 'pop.rcn.com', Server: 'smtp.rcntypodomain.us', Protocol: SMTP, Port: 25, Secure(SSL): No, Socket Error: 11004, Error Number: 0x800CCC0D The host 'pop.rcntypodomain.us' could not be found. Please verify that you have entered the server name correctly. Account: 'pop.rcn.com', Server: 'pop.rcntypodomain.us', Protocol: POP3, Port: 110, Secure(SSL): No, Socket Error: 11004, Error Number: 0x800CCC0D

With SiteFinder, here are the error messages that are now produced:

The message could not be sent because one of the recipients was rejected by the server. The rejected e-mail address was 'rms@computerbytesman.com'. Subject 'Testing 1 2 3', Account: 'pop.rcn.com', Server: 'smtp.rcntypodomain.com', Protocol: SMTP, Server Response: '550 : Client host rejected: The domain you are trying to send mail to does not exist.', Port: 25, Secure(SSL): No, Server Error: 550, Error Number: 0x800CCC79

The connection to the server has failed. Account: 'pop.rcn.com', Server: 'pop.rcntypodomain.com', Protocol: POP3, Port: 110, Secure(SSL): No, Socket Error: 10061, Error Number: 0x800CCC0E

Breaking Windows Networking Utilities

VeriSign's SiteFinder service also breaks many of the standard Windows networking utilities by providing misleading error messages, temporary lockups, and incorrect status information.

For example, referencing a UNC path with a misspelled domain name with SiteFinder in the picture gives an incorrect error message and hangs a command prompt window for about 30 seconds:

C:worksitefinder>dir \sdkfasdlfkasdlfkasdk.comdrivec
Access is denied.

The correct error message is displayed instantly if SiteFinder is out of the picture:

C:worksitefinder>dir \sdkfasdlfkasdlfkasdk.usdrivec
The network path was not found.

The correct error message for a misspelled domain name in the Windows FTP utility is:

C:worksitefinder>ftp ftp.asdklsdfjaskdfjasdfjasdjfasdfj.us
Unknown host ftp.asdklsdfjaskdfjasdfjasdjfasdfj.us.

With SiteFinder, the FTP utility now provides a useless error message:

C:worksitefinder>ftp ftp.asdklsdfjaskdfjasdfjasdjfasdfj.com
> ftp: connect :Unknown error number

The PING utility gives incorrect results for misspelled domain names:

[Incorrect]
C:worksitefinder>ping www.sdfjasdfjaskldfjasdfjas.com

Pinging www.sdfjasdfjaskldfjasdfjas.com [64.94.110.11] with 32 bytes of data:
Ping statistics for 64.94.110.11:
Packets: Sent = 1, Received = 0, Lost = 1 (100% loss),

[Correct]
C:worksitefinder>ping www.sdfjasdfjaskldfjasdfjas.us
Ping request could not find host www.sdfjasdfjaskldfjasdfjas.us.
Please check the name and try again.

Ditto for tracert:

[Incorrect]
C:worksitefinder>tracert www.asdfjasdkfjasfjasdj.com

Tracing route to www.asdfjasdkfjasfjasdj.com [64.94.110.11] over a maximum of 30 hops:

1 11 ms 14 ms 15 ms 10.222.0.1
2 14 ms 12 ms 11 ms bar01-p0-2.orlnhe1.ma.attbb.net [24.128.190.129]
3 17 ms 14 ms 16 ms bar01-s2-1-0.nbfrhe1.ma.attbb.net [24.91.0.141]
...

[Correct]
C:worksitefinder>tracert www.asdfjasdkfjasfjasdj.us
Unable to resolve target system name www.asdfjasdkfjasfjasdj.us.

Written by Richard M. Smith, Computer & Internet Security Expert

Related topics: DNS, Domain Names