The Domain Name System (DNS) translates Internet domain and host names to IP addresses.
2
votes
2answers
772 views
How do the root servers get updated with my name server? Is WhoIS information always in sync with the root?
I've never understood what happens behind the scenes when I go to my registrar and enter in my name server's information.
Can someone elaborate on what happens when an update is made, and how it is ...
2
votes
2answers
822 views
Is there any disadvantage in using OpenNIC for DNS resolution?
What are the advantages/disadvantages of OpenNIC vs ISP for DNS resolution with regards to security and privacy?
2
votes
2answers
507 views
Is it less secure to use OpenDNS for banking accounts, SSH, Adsense account?
I have one WiFi connection in my house which I use for my iPad, phone and computers.
I want to block adult sites, time consuming sites for every device that use the WiFi connection.
So I came across ...
2
votes
3answers
2k views
How does bidirectional authentication using SSL work?
Let's say Alice wants to use a webservice on Bob.
Bob is on bob.in.wonderland.com
Alice opens a connections to bob.in.wonderland.com:443. Taken by DNS magic rabbit, Alice arrives on port 443 at ...
2
votes
2answers
189 views
DNS access limitations
Im working on a script that's going to talk to a DNS on a LAN that have information about local domains. And I believe its blocking my requests.
So my question is: How can you limit a DNS server to ...
2
votes
1answer
93 views
How to verify DNSKEY by using its corresponding DS
A DNSKEY on a name server can be verified by using it DS stored on its parental name server. According to RFC4034: The DS record refers to a DNSKEY RR by including a digest of that DNSKEY RR.
The ...
2
votes
1answer
94 views
How did DNSChanger rogue name servers work?
I know DNS changer, changes DNS server with its own Evil DNS server on an infected computer, then the DNS servers point to their own rogue nameservers and the nameservers change the ads on websites ...
2
votes
2answers
825 views
DNS Spoofing vs ARP spoofing, the relationship?
As I understand, ARP spoofing can only be done on the LAN-side of the router?
DNS spoofing, can that be done either side of the router?
In order to do DNS spoofing, do you need to perform ARP ...
2
votes
2answers
220 views
DNS cache poisoning
What are the things the attacker needs to know from the victim to perform DNS cache poisoning ?
for example : IP , Port number and Transaction number
what else ?
2
votes
1answer
100 views
External network DNS spoofing
I've been thinking recently if its possible to DNS spoof an external network. Let's say for example you are attacker.com and your victim is of course victim.com. Then I've thought of 2 scenarios:
1. ...
2
votes
2answers
328 views
DNS Spoofing vs DNS Cache Poisoning
What is the difference between DNS Spoofing and DNS Cache Poisoning ???
It seems like there are little differences between two attacks, with an exception that DNS server is actually might cache the ...
2
votes
0answers
373 views
Hack scenario when a person has a non-superuser shell [closed]
Suppose that there are following three machines in the network:
Machine A:
Microsoft Server 2003 Service Pack 2
FileZilla 0.9.29 beta ftp server (TCP 21)
Mcafee ePolicy server (81), remote desktop ...
1
vote
2answers
1k views
DDoS Protection for DNS providers
Zerigo, our DNS provider has reported to have been under heavy DDOS attack in the last 24 hours or so. Considering the distributed nature of DNS, and their architecture consisting of 5 main DNS ...
1
vote
3answers
4k views
If I use a VPN, who will resolve my DNS requests?
Will they be resolved by my VPN provider, or by my original ISP (if left on "automatic" settings)? Would I have to manually configure a dns server, to make sure my requests will not be resolved by my ...
1
vote
3answers
344 views
Preventing 3rd party DNS Servers from being used
While using a wireless network recently that implemented a captive gateway, I noticed that any third party DNS servers manually set would not allow the network to connect properly.
This would seem ...
1
vote
1answer
127 views
How does http://un****-us.com/ work?
There is this site un**-us.com which supposedly allows you to bypass ISP rules such as content restriction on a particular area. Now , it is well known that routing your traffic through a web proxy ...
1
vote
2answers
1k views
what is the Akamai Name Server i see at some big companies
I have played with DNS a lot lately, and i have found that some big companies's web sites uses the Akamai NS as the Name Server for thier WWW servers, for example:
$>nslookup
> www.redhat.com
...
1
vote
2answers
125 views
anti virus acting up/DNS poisoning
I was running my desktop and the AV deleted a file that it said was a virus (this was not during a scan, just normal usage). Now I'm just browsing the web and I got a couple of DNS poisoning attacks ...
1
vote
1answer
92 views
Following redirects from HTTPS to HTTP - Secure?
So I have an HTTP client which supports HTTPS. However, it doesn't follow the HTTP spec recommendation for redirects on POST(which is to ask the user before redirecting)
This means, in theory, if you ...
1
vote
1answer
287 views
What is a DNS leak?
I'm planning on getting a VPN service (probably Privateinternetaccess) and read that it is imperative to plug DNS leaks. The only information I found on google describing what these are is here and I ...
1
vote
1answer
922 views
What are the risks of removing ISATAP from the default global block list?
The process of installing Microsofts pseudo VPN called Direct Access requires me to remove the ISATAP name from the default global block list by running this command:
dnscmd /config ...
1
vote
1answer
417 views
How can I tell if a DNSSec zone is protected using NSEC3 (versus NSEC)
This answer describes how DNSSec might permit "Zone walking"... where a bad guy can extract all the DNS records from a DNSSec enabled zone. NSEC3 is an update that prevents this. (See bottom of this ...
1
vote
1answer
269 views
Should Windows 2008 R2 be used as an externally facing DNS name server?
When compared to more traditional DNS name servers, what are the benefits / drawbacks of using a Windows 2008 R2 as a public ns record for a company.
What limitations, or security issues would I ...
1
vote
1answer
748 views
Is it safe to use namebench?
As the title states is Google's namebench utility safe to run on my Mac and let it use Safari's web history?
1
vote
1answer
242 views
DNS query through squid? [closed]
My IDS picked up our squid proxy server doing a dynamic DNS request. I wasn't aware squid passed DNS requests from the client to the internal DNS server. Is this possible?
Snort Alert:
ET POLICY ...
1
vote
1answer
101 views
Reliability of DNSBLs for Stopping Forum Spam
I know that certain DNS blacklists are considered more reliable than others, in that they don't have as many false positives.
I run a forum that is known to be spammed, and I've installed a mod to ...
1
vote
1answer
79 views
DNS Cache poisioning examples, or other criteria when a client ignores a response
Is there a concise set of rules that describe what 99% percent of DNS responders accept?
Conversely, are there are set of rules that define when DNS queries are invalid?
Example answer
I would ...
0
votes
1answer
693 views
Is OpenVPN secure in this way?
I'm familiar with OpenVPN because my home router has a builtin OpenVPN server.
I would like to use OpenVPN all the time, but how do I deal with situations where I don't own the routers?
ex.: in a ...
0
votes
3answers
433 views
To DMZ, or not to DMZ
So for an assignment, we need to create a scheme (and eventually also the set-up) of a couple of servers in a network.
The 'networks' are:
Internal network
DMZ
The internet
And the servers we ...
0
votes
1answer
645 views
tor and widecap dns leak
I am using a program that I coded in C#.
All it does is use HttpWebRequest to request some pages and read info from them.
I tried running it through Tor. I installed the Vidalia Bundle and Widecap.
My ...
0
votes
1answer
139 views
DNS Cache Poisoning and Snooping
I'm trying to do two things here.
The first is poison the cache of a target DNS server. A scan has suggested the network I'm attacking is vulnerable to CVE-1999-0024.
My understanding of this ...
0
votes
2answers
551 views
Anyone out there using Umbrella from OpenDNS? What exactly is it?
I'm still looking for a centrally-managed AV/malware management system and I've been testing out both Panda and Webroot (due to their 'cloud-based' structure that doesn't require a server for me to ...
0
votes
1answer
192 views
How have DNS recursion attacks happened?
There are a few resources describing how to carry out DNS recursion attacks. Is there any good explanation to help me understand how these attacks work and if systems on my network are still ...
0
votes
3answers
362 views
DNS queries with hex string that is a SHA1 of a domain name! Is it a malware?
My computer does a lot of queries to strange domains such as:
56cea5c2b408989ab067adcb787d0f99209bbe07.mydomain.com
The strange thing is that 56cea5c2b408989ab067adcb787d0f99209bbe07 is the SHA1 of ...
0
votes
1answer
224 views
Is using a local DNS cache server more secure than using a DNS server from a router?
Is using a local DNS cache server imore secure than using a DNS server from a router?
0
votes
1answer
62 views
The importance of changing DNS when Using Antifiltering software
Is it safe that sometimes my Anti-filtering program does not change the DNS address?
0
votes
1answer
485 views
Protecting yourself against DNS spoofing?
Are there any things which the user can do, on their own machine, to protect against DNS spoofing? I was just thinking when I was at the airport last and I wanted to check my email I used a hotspot ...
0
votes
1answer
176 views
DNS Vulnerabilities Scanner [closed]
I'm looking for a DNS Vulnerabilities Scanner tools, which is specially for DNS vulnerabilities, that shows me the Vulnerabilities, and the solution for that, like "Nessus" and "Acunetix" but just ...
0
votes
0answers
116 views
How to locate DNS information at localhost windows machine [closed]
Windows has some host information at hosts file, and I am wondering whether this file is picked up by DNS server if DNS server is set.
Or where is DNS information located at?
0
votes
1answer
80 views
linux accept connection based on request [closed]
I don't know if this is even possible...
I have a single static IP and 3 servers connected to the router. 1 server is Ubuntu Linux with an SSH server. 6 or 8 domain names are linked to my 1 static IP. ...
0
votes
1answer
261 views
OpenDNS vs Dyn Internet Guide [closed]
Inspired by this question I have been looking for alternatives to my ISP's DNS servers. OpenDNS is mentioned quite a bit (as well as Google's DNS, which being Google I have an issue trusting).
I have ...
-1
votes
1answer
271 views
How does DNS work?
I'm learning pentesting from books. So far I thought I know about DNS but now I'm completely lost and confused.
well, I know what happens when you enter domain name in your browser:
Say, I've ...
-1
votes
1answer
170 views
Is .bank owned by banking industry or not? [closed]
According to https://idc-insights-community.com/financial/financial-services-technology/the-four-letter-word-that-could-change-the-busines
Banking Industry was lobbying for .bank
But as I read this
...
-1
votes
3answers
253 views
Available alternative DNS protocol not another dark-net [closed]
Hi does any one knows any DNS alternative Protocols ?
If so what is the most used ?
Is easy to setup ?
Is easy to have two DNS protocols one where you connect to the Common Internet and the other ...
-1
votes
1answer
62 views
Redirect attack [closed]
I just discovered that our server other's website for example: http://destiny.mbtosi.com/styles/new/images/no.png should say "This Web Page no longer exists." but in 50% hits it shows an image from ...
-2
votes
1answer
101 views
how to protect against this vulnerability CVE-2012-5166 in the DNS [closed]
I need to know how to protect my DNS server of the vulnerability with iptables rules. Please can support me
-6
votes
1answer
61 views
may DNS companies track visitors by traffic analysis? [closed]
Internet is based on name servers, we always type stackexchange.com in address bar to access this website no stackexchange's IP address. as ICANN is managing every DNS records for every website where ...
