[fulafel]

If my computer asks your computer what dns server to use, and you respond with the address of a nefarious one, it's not necessarily a mitm.

[webstrand]

The MitM happens when the client sends packets to the fake IP, I think the argument goes.