The Domain Name System (DNS) translates Internet domain and host names to IP addresses.

learn more… | top users | synonyms

6
votes
2answers
2k views

How bad is the leaking of Internal IP addresses through external DNS

If an external DNS server is leaking internal IP addresses are there any significant security threats associated with this information leakage? Apart from most the obvious - gaining an understanding ...
0
votes
1answer
332 views

Is using a local DNS cache server more secure than using a DNS server from a router?

Is using a local DNS cache server imore secure than using a DNS server from a router?
14
votes
7answers
2k views

Can a HTTPS connection be compromised because of a rogue DNS server

If I'm visiting (just a desktop pc, client side) a site that has a valid HTTPS cert/connection, that can it be compromised if I'm using [not with free will, so e.g.: I'm "attacked"] a rouge DNS ...
17
votes
5answers
7k views

Do you detect/react to DNS tunnelling?

I've just seen a talk about tunnelling TCP/IP over DNS requests, because port 53 UDP is usually open and unfiltered. What techniques exist to detect and block such tunnels, and have you ever seen that ...
2
votes
2answers
218 views

DNS access limitations

Im working on a script that's going to talk to a DNS on a LAN that have information about local domains. And I believe its blocking my requests. So my question is: How can you limit a DNS server to ...
6
votes
1answer
2k views

How to create your own RBL DNS Blacklist to prevent spam

I am getting sick of reporting the same old chinese emails to Spamcop now and would like to make my own small RBL list that I can easily add blocks of IP's to. I have a spare PC and static IP address ...
4
votes
1answer
260 views

Anyone use the International Domain Name (IDN) security mitigation API's? Is there a wrapper for .NET?

The International Domain Name mitigation API's are available here for download: http://www.microsoft.com/downloads/en/details.aspx?FamilyID=ad6158d7-ddba-416a-9109-07607425a815&displaylang=en ...
4
votes
2answers
1k views

How do the root servers get updated with my name server? Is WhoIS information always in sync with the root?

I've never understood what happens behind the scenes when I go to my registrar and enter in my name server's information. Can someone elaborate on what happens when an update is made, and how it is ...
4
votes
1answer
153 views

When should a DNS entry be cached? What conditions should not be? How do I determine the TTL?

I'm writing a DNS resolver and am building a spreadsheet of when a DNS record should be cached, and not be cached... but it's harder than it first looks (to me at least). Is there consolidated test ...
4
votes
2answers
158 views

What risk do International Domain Names (IDN) pose?

I understand that IDN's are basically a GUI display change for domains that have a prefix of "xn--". What should I advise companies do in regards to these domains? For example, should companies ...
6
votes
3answers
2k views

What's involved in taking over someone else's domain name?

I'm asking this for purely academic reasons. I know that there are domain record lists and whatnot, but I'm trying to understand the exact structure of how DNS works and where someone can potentially ...