The Domain Name System (DNS) translates Internet domain and host names to IP addresses.

learn more… | top users | synonyms

2
votes
1answer
27 views

Is a ptr mechanism in an SPF record secure?

If I understand http://www.openspf.org/SPF_Record_Syntax correctly, any machine with an IP that points to my-domain.com can send email as if it's from my-domain.com if I'm using ptr in my SPF record. ...
2
votes
2answers
525 views

Can DNS servers log users requests for commercial use (e.g. track direct access to websites)?

How does it work? For example, could OpenDNS be tracking everything (source ip + requested url) and then selling it to who have the necessary information to correlate the ip addresses with people ...
2
votes
1answer
1k views

How to verify DNSKEY by using its corresponding DS

A DNSKEY on a name server can be verified by using it DS stored on its parental name server. According to RFC4034: The DS record refers to a DNSKEY RR by including a digest of that DNSKEY RR. The ...
2
votes
1answer
126 views

How did DNSChanger rogue name servers work?

I know DNS changer, changes DNS server with its own Evil DNS server on an infected computer, then the DNS servers point to their own rogue nameservers and the nameservers change the ads on websites ...
2
votes
1answer
134 views

DNS Cache poisioning examples, or other criteria when a client ignores a response

Is there a concise set of rules that describe what 99% percent of DNS responders accept? Conversely, are there are set of rules that define when DNS queries are invalid? I would think that the ...
2
votes
1answer
180 views

ISP glitch or a malware? Has this ever happened to you?

Brief background: I consider myself a relatively paranoid power-user, if not an absolute pro. I regularly update my AV and keep up with all the latest updates on my Windows7 machine. But what happened ...
2
votes
5answers
255 views

What is the best way to run MitM attack on my wireless network?

For research purpose, I want to launch a MitM attack on computers that are connected to my wireless network. I wonder what is the best way to do so. Notice that I control the router, and do not want ...
2
votes
1answer
549 views

How Do I Troubleshoot a Browser Hijack on a Mac?

My Mac is getting weird redirects with Safari and Chrome, however not with Mozilla Firefox. Since I cannot find software to do malware removal on Apple products or any good information, I am at a loss ...
2
votes
1answer
77 views

Conversant, CNAME, Cookies, and PCI complaince

We have been asked to evaluate Conversant Tracking. http://www.conversantmedia.com/solutions/enterprise-solutions From what I can tell its pretty straight forward tracking, like google re-marketing, ...
2
votes
1answer
290 views

DNS: Conditional Forwarding

I'm currently attempting to track down a problem with a Websense Web Filter breaking SSL connections for sites in a conditional forward. To do this, I need to know exactly how a conditional forward ...
2
votes
1answer
658 views

Is my ISP BGP/DNS hijacking?

I've noticed some very suspicious activity from my ISP. Sometimes I would notice that when I ping google.com it would resolve to an IP which is owned by my ISP. I currently don't have an example ...
2
votes
2answers
361 views

DNS cache poisoning

What are the things the attacker needs to know from the victim to perform DNS cache poisoning ? for example : IP , Port number and Transaction number what else ?
2
votes
2answers
57 views

How can I determine the domain controller when it's not in DNS?

On a penetration test going in blind for an organization, meaning no knowledge of network topology of design, no idea what the domain(s) might be, and domain controller is not apparent in DNS...how ...
2
votes
0answers
49 views

DNS poisoned cache does not have any effect [closed]

I try to reproduce the attack, revealed by Dan Kaminsky in 2008, to poison DNS cache. I made my own virtual network, and all I do is confined within. The poisonning seems to work. But is doesn't. ...
2
votes
1answer
660 views

External network DNS spoofing

I've been thinking recently if its possible to DNS spoof an external network. Let's say for example you are attacker.com and your victim is of course victim.com. Then I've thought of 2 scenarios: 1. ...
2
votes
0answers
879 views

Hack scenario when a person has a non-superuser shell [closed]

Suppose that there are following three machines in the network: Machine A: Microsoft Server 2003 Service Pack 2 FileZilla 0.9.29 beta ftp server (TCP 21) Mcafee ePolicy server (81), remote desktop ...
1
vote
3answers
123 views

Are different top level domains somehow different security wise?

If so why is the difference? I've tried to google it but nothing relevant was found.
1
vote
2answers
273 views

anti virus acting up/DNS poisoning

I was running my desktop and the AV deleted a file that it said was a virus (this was not during a scan, just normal usage). Now I'm just browsing the web and I got a couple of DNS poisoning attacks ...
1
vote
3answers
654 views

Preventing 3rd party DNS Servers from being used

While using a wireless network recently that implemented a captive gateway, I noticed that any third party DNS servers manually set would not allow the network to connect properly. This would seem ...
1
vote
2answers
110 views

Roommate Frequently Hacked — How Do I Protect My Network/Devices?

If you absolutely had to share a network with a user who had a very lax approach to security and was frequently hacked (1-2x month for over a year now), what might you consider doing to secure your ...
1
vote
1answer
75 views

Force DNS to attach bad IP address

The question is not professional, but what I'm trying to say is... Is there any way to inject or force the DNS server to attach/change an IP address for some site. For example, I'm running an apache ...
1
vote
1answer
83 views

DNS Redelegation - Security Risk?

I am a web developer and I use Adobe Business Catalyst. To use some of their services it is recommended you redelegate the domain. In other words change the nameservers to Business Catalyst. I have ...
1
vote
1answer
360 views

Assuming no MITM, is Gmail communication 100% secure and private?

I sometimes have to use my personal Gmail account from my company workstation, where I know for fact they are using content-aware firewall(s) like Palo Alto, and potentially other nasty things like ...
1
vote
1answer
243 views

How does http://un****-us.com/ work?

There is this site un**-us.com which supposedly allows you to bypass ISP rules such as content restriction on a particular area. Now , it is well known that routing your traffic through a web proxy ...
1
vote
1answer
4k views

What are the risks of removing ISATAP from the default global block list?

The process of installing Microsofts pseudo VPN called Direct Access requires me to remove the ISATAP name from the default global block list by running this command: dnscmd /config ...
1
vote
2answers
109 views

What can my university see by installing a CA root certificate on my computer, even when I'm using a VPN?

To use the wifi at my university, you must install a CA root certificate by them. In my case, I am using a Mac computer with a VPN installed. I'm curious, what can they see me do on my computer by ...
1
vote
3answers
480 views

What is same site scripting and what are some exploit scenarios?

I know it is an issue with how DNS is configured , but is it really dangerous if the attacker couldn't access your network?
1
vote
2answers
530 views

Way to make “DNS unblockers” safe?

Many people who live outside the US use "DNS unblockers" such as Unblock-Us to access region restricted services such as Netflix and Hulu. My understanding of these services is that for DNS requests ...
1
vote
1answer
121 views

Network enumeration protection [closed]

I was reading about DNS security, and readed about Zone Transfer and how can be used to retrieve host information of a network, so not allowing Zone Tranfer from external sources will be the solution ...
1
vote
2answers
4k views

Anyone out there using Umbrella from OpenDNS? What exactly is it?

I'm still looking for a centrally-managed AV/malware management system and I've been testing out both Panda and Webroot (due to their 'cloud-based' structure that doesn't require a server for me to ...
1
vote
2answers
61 views

Using free subdomains to circumvent web filtering systems

(I was told that this was the place to ask this by someone from Webmasters, if I've got it wrong again please give me a chance!) I'm running a personal proxy service for the use of myself and some of ...
1
vote
2answers
108 views

DNSSec vs SSL and IPsec

Theoretically, DNS cache poisoning shouldn't matter,because everything important is protected by SSL and IPsec. So why DNSSec was developed? Aren't the first two protocols sufficient?
1
vote
1answer
148 views

Root/Naked domain and DDOS

Some services like Github has DDOS mitigation measures for their root/naked domain, but not other subdomain(s). What so special about the root domain concerning the DDOS attacks? [1] ...
1
vote
5answers
148 views

How do big companies ensure that other people don't register a new top level domain with their name?

For example today there are ".codes", ".farm" and ".vaijes" newly available. How do big companies like google, facebook, twitter, .. keep sure that they are the first who register their name on the ...
1
vote
1answer
131 views

DNS zone size overload?

Is it possible to DOS DNS by creating custom dns zones with lots of text records in them so that the size of the DNS zone is in the order for example 100 Gigabyes, and then query all the dns records ...
1
vote
1answer
253 views

Following redirects from HTTPS to HTTP - Secure?

So I have an HTTP client which supports HTTPS. However, it doesn't follow the HTTP spec recommendation for redirects on POST(which is to ask the user before redirecting) This means, in theory, if you ...
1
vote
1answer
651 views

Should Windows 2008 R2 be used as an externally facing DNS name server?

When compared to more traditional DNS name servers, what are the benefits / drawbacks of using a Windows 2008 R2 as a public ns record for a company. What limitations, or security issues would I ...
1
vote
2answers
87 views

Security risk with using internal IP on public DNS

A web server inside the office network which is accessed by staff internally and the internal DNS resolves web.company.com to the server's LAN IP. Publicly, company.com nameservers belong to their ...
1
vote
1answer
23 views

Wildcard DNS entry from a security PoV

We are going to release our new product which will have customers create their own subdomains. This requires having a wildcard DNS on our main domain (We have no other options, right?) Are there any ...
1
vote
1answer
591 views

DNS settings compromised from WAN on Edimax ADSL router

My home network Edimax AR-7084gB ADSL modem/router with firmware verison 2.9.5.0(RUE0.C2A)3.5.18.0 was exploited from WAN few days ago. The attacker changed DNS server settings - primary server to ...
1
vote
1answer
410 views

DNS causing SSL errors

On my old ISP's DNS servers, sometimes https://www.facebook.com would return a cert for Akamai instead of Facebook. What I don't understand is that changing my DNS server to Googles (8.8.8.8) fixes ...
1
vote
1answer
157 views

DNS queries to compromise DNS cache

The transaction ID for DNS queries can take values from 1 to 65,536 and my computer pseudorandomly chooses one for each DNS request. If I sents 1,024 false replies per request, how many requests ...
1
vote
1answer
595 views

Clear the DNS server's cache?

Is there anyway for the attacker to clear the cache of a DNS server in order to poison it? For example, if someone attacked my DNS server in an attempt to spoof Google.com, they will receive the ...
1
vote
5answers
401 views

Manual DNS change

If I manually change my DNS setting in the router or in Windows settings from the provider's one to, say, 8.8.4.4 by Google - will it mean that my ISP has no idea which sites I am going to? Maybe it ...
1
vote
1answer
3k views

Is it safe to use namebench?

As the title states is Google's namebench utility safe to run on my Mac and let it use Safari's web history?
1
vote
1answer
384 views

DNS query through squid? [closed]

My IDS picked up our squid proxy server doing a dynamic DNS request. I wasn't aware squid passed DNS requests from the client to the internal DNS server. Is this possible? Snort Alert: ET POLICY ...
1
vote
1answer
150 views

Reliability of DNSBLs for Stopping Forum Spam

I know that certain DNS blacklists are considered more reliable than others, in that they don't have as many false positives. I run a forum that is known to be spammed, and I've installed a mod to ...
1
vote
0answers
50 views

Does DNSSEC provide signed statements that a certain domain does NOT yet support DNSSEC? If not, why not?

In my security class with David Wagner, we talked about some of the reasons why DNSSEC is not widely adopted right now. One of the reasons was that for backward compatibility reasons, clients need to ...
1
vote
0answers
61 views

RHS Blocklist, Other blocklists and impacts of RHS blocking on similar domains

I am not very familiar with Blocklists so had a few queries around it. I have a sub-domain example.com which is used to send mass marketing emails i.e. emails are sent from no-reply@example.com. A ...
0
votes
1answer
2k views

Is OpenVPN secure in this way?

I'm familiar with OpenVPN because my home router has a builtin OpenVPN server. I would like to use OpenVPN all the time, but how do I deal with situations where I don't own the routers? ex.: in a ...