The Domain Name System (DNS) translates Internet domain and host names to IP addresses.

learn more… | top users | synonyms

1
vote
2answers
197 views

DNSSec vs SSL and IPsec

Theoretically, DNS cache poisoning shouldn't matter,because everything important is protected by SSL and IPsec. So why DNSSec was developed? Aren't the first two protocols sufficient?
1
vote
1answer
204 views

Root/Naked domain and DDOS

Some services like Github has DDOS mitigation measures for their root/naked domain, but not other subdomain(s). What so special about the root domain concerning the DDOS attacks? [1] ...
1
vote
5answers
187 views

How do big companies ensure that other people don't register a new top level domain with their name?

For example today there are ".codes", ".farm" and ".vaijes" newly available. How do big companies like google, facebook, twitter, .. keep sure that they are the first who register their name on the ...
1
vote
1answer
169 views

DNS zone size overload?

Is it possible to DOS DNS by creating custom dns zones with lots of text records in them so that the size of the DNS zone is in the order for example 100 Gigabyes, and then query all the dns records ...
1
vote
1answer
334 views

Proxy aware or DNS capable meterpreter?

I'm having issues traversing a proxy protected network and was wondering if there are meterpreter implementations which allow proxy awareness (automatically using windows AD credentials) or which can ...
1
vote
1answer
311 views

Following redirects from HTTPS to HTTP - Secure?

So I have an HTTP client which supports HTTPS. However, it doesn't follow the HTTP spec recommendation for redirects on POST(which is to ask the user before redirecting) This means, in theory, if you ...
1
vote
1answer
678 views

Should Windows 2008 R2 be used as an externally facing DNS name server?

When compared to more traditional DNS name servers, what are the benefits / drawbacks of using a Windows 2008 R2 as a public ns record for a company. What limitations, or security issues would I ...
1
vote
1answer
26 views

DNSSEC Why are RRSIG return in the Answer not Additional section

Looking at Wireshark traces of DNSSEC responses, I see that the RRSIG is returned in the Answer section, even though it wasn't part of the query. Why isn't it returned in the Additional Section, ...
1
vote
2answers
84 views

What are the pros and cons of using DNS to block unwanted domains?

There are many methods to block unwanted outgoing requests. Examples include browser settings and extensions, and .hosts files. While DNS blocking won't affect direct accesses to a numeric IP address, ...
1
vote
2answers
56 views

What types of attacks and abuse does DNSSEC protect against?

I've read lots of different articles on what DNSSEC is and that it provides authentication for DNS. What I unfortunately haven't seen is a good description of the types of attacks and abuse that ...
1
vote
1answer
54 views

How Fast Flux technique works exactly?

I was reading about botnets and C&C servers and saw this term. I've read this Wikipedia article but I couldn't really understand what and how this is working. I think its some kind of proxy ...
1
vote
1answer
115 views

Is it possible to redirect someone to a fake site without changing the hosts file?

Is it possible to redirect someone to a fake site without changing the hosts file? When I access a bank site, I receive a fake page. But my hosts file does not have any changes to do this. Is it ...
1
vote
2answers
173 views

Security risk with using internal IP on public DNS

A web server inside the office network which is accessed by staff internally and the internal DNS resolves web.company.com to the server's LAN IP. Publicly, company.com nameservers belong to their ...
1
vote
1answer
30 views

Wildcard DNS entry from a security PoV

We are going to release our new product which will have customers create their own subdomains. This requires having a wildcard DNS on our main domain (We have no other options, right?) Are there any ...
1
vote
1answer
894 views

DNS settings compromised from WAN on Edimax ADSL router

My home network Edimax AR-7084gB ADSL modem/router with firmware verison 2.9.5.0(RUE0.C2A)3.5.18.0 was exploited from WAN few days ago. The attacker changed DNS server settings - primary server to ...
1
vote
1answer
528 views

DNS causing SSL errors

On my old ISP's DNS servers, sometimes https://www.facebook.com would return a cert for Akamai instead of Facebook. What I don't understand is that changing my DNS server to Googles (8.8.8.8) fixes ...
1
vote
1answer
162 views

DNS queries to compromise DNS cache

The transaction ID for DNS queries can take values from 1 to 65,536 and my computer pseudorandomly chooses one for each DNS request. If I sents 1,024 false replies per request, how many requests ...
1
vote
1answer
649 views

Clear the DNS server's cache?

Is there anyway for the attacker to clear the cache of a DNS server in order to poison it? For example, if someone attacked my DNS server in an attempt to spoof Google.com, they will receive the ...
1
vote
5answers
430 views

Manual DNS change

If I manually change my DNS setting in the router or in Windows settings from the provider's one to, say, 8.8.4.4 by Google - will it mean that my ISP has no idea which sites I am going to? Maybe it ...
1
vote
1answer
3k views

Is it safe to use namebench?

As the title states is Google's namebench utility safe to run on my Mac and let it use Safari's web history?
1
vote
1answer
424 views

DNS query through squid? [closed]

My IDS picked up our squid proxy server doing a dynamic DNS request. I wasn't aware squid passed DNS requests from the client to the internal DNS server. Is this possible? Snort Alert: ET POLICY ...
1
vote
1answer
153 views

Reliability of DNSBLs for Stopping Forum Spam

I know that certain DNS blacklists are considered more reliable than others, in that they don't have as many false positives. I run a forum that is known to be spammed, and I've installed a mod to ...
1
vote
0answers
75 views

Why would home routers accept incoming DNS traffic?

I stumbled upon an interesting paper (PDF Link) where researchers found out that more than 58% of the DNS open resolvers that are blamed in DDoS attacks are in fact home routers distributed by ISPs to ...
1
vote
0answers
60 views

Does DNSSEC provide signed statements that a certain domain does NOT yet support DNSSEC? If not, why not?

In my security class with David Wagner, we talked about some of the reasons why DNSSEC is not widely adopted right now. One of the reasons was that for backward compatibility reasons, clients need to ...
1
vote
0answers
68 views

RHS Blocklist, Other blocklists and impacts of RHS blocking on similar domains

I am not very familiar with Blocklists so had a few queries around it. I have a sub-domain example.com which is used to send mass marketing emails i.e. emails are sent from no-reply@example.com. A ...
0
votes
1answer
3k views

Is OpenVPN secure in this way?

I'm familiar with OpenVPN because my home router has a builtin OpenVPN server. I would like to use OpenVPN all the time, but how do I deal with situations where I don't own the routers? ex.: in a ...
0
votes
2answers
439 views

Is my service provider hacked and what can I do to protect myself?

I found myself looking at a stock and forex search page when I try to access Chinese Stackexchange using my FireFox browser today. This is what the page looks like: And this is the HTML of the ...
0
votes
2answers
57 views

Unpublished server

Is it possible to setup my web server such that only certain sources can access and the public from internet has no access? i am thinking that we could just not publish our web server URL/IP to our ...
0
votes
2answers
107 views

Broadband security question

I have a fixed line broadband connection at home. This morning when I tried accessing Google or Facebook through my browser (Google Chrome) I got a webpage asking me to update my flash player. I found ...
0
votes
2answers
13k views

Is OpenDNS safe to use?

Anyone know anything about OpenDNS? Is it safe to use, or should it be avoided? If it should be avoided, what are the alternatives? I am basically looking for a way to block certain sites from my ...
0
votes
1answer
1k views

tor and widecap dns leak

I am using a program that I coded in C#. All it does is use HttpWebRequest to request some pages and read info from them. I tried running it through Tor. I installed the Vidalia Bundle and Widecap. My ...
0
votes
4answers
489 views

Masking IP address and port number for Web application [closed]

I have a Web application running on port 89 ( non-standard port) of a Windows 2012 R2 machine. The login page for this application needs to be accessible through a link on my website - let's call it ...
0
votes
1answer
1k views

How to test for zone transfer? [duplicate]

I heard that it is possible to test for zone transfer attacks on a web application using host and dig commands in Linux. How it is done?
0
votes
3answers
160 views

How would I secure my hosts file?

I know the hosts file is often deemed obsolete by an actual DNS, but what is/are the best way(s) to secure a hosts file (Current Best Practice)? Example: Would I delete the hosts file, input known ...
0
votes
2answers
723 views

DNS Cache Poisoning as a Foil to SSL

I recently learned a bit more about DNS cache poisoning, and my understanding of the basic way it works is by editing the DNS cache so that when the victim types in, say, www.google.com they get the ...
0
votes
2answers
207 views

Can Tor browser bundle be attacked like this?

When using the Tor browser bundle, you load the check.torproject.org on start. It tells you when there is a security update to downloads, and let's you click a link to get it. The way for users to ...
0
votes
1answer
280 views

How CDN operator will decide content fo me if i am using google public DNS [closed]

As i saw most of the internet is being load balanced even at DNS . And DNS load balancers takes decision on behalf of client's DNS . So I Am just curious to know if i will use 8.8.8.8 as nameserver in ...
0
votes
1answer
84 views

How does the DNS-spoofer know the original destination of the packet?

It's perhaps my lack of deeper knowledge of how the DNS, NAT or TCP works, but I have been thinking about the following scenario and can't figure out the following problem which arises in DNS-spoofing ...
0
votes
2answers
126 views

Browser page “Not resolved” page hijacked by yandex [closed]

Any domain that cannot be resolved defaults to yandex right now, on any browser on my system. Helper objects or extensions are not installed. It turns out that the ISP (Turk Telekom) is employing ...
0
votes
1answer
178 views

Save to setup localhost.example.com to test wildcard SSL?

I have a domain with a wildcard SSL certificate (i.e. "*.example.com"). I also develop using WAMP setups, which I would like to be able to test HTTPS on. There are several tutorials on how to setup a ...
0
votes
2answers
934 views

How could you find wildcard subdomains on websites?

Other than testing different URLs separately, is there anyway to find out if a website has a wildcard sub domain?
0
votes
1answer
2k views

Enabling port forwarding on port 53 on a DNS server, why is it a risk?

Well, actually I know that the risk is that somebody from an external network could access IPs and hostnames of the machines on a local network, but I am struggling to understand if this is it or if ...
0
votes
1answer
135 views

Alternative to ICANN? [closed]

What are major DNS services offered that aren't state-controlled. Better yet, why can't we take Bitcoin's model and create a truly decentralized system with P2P DNS? I see potential reasons behind ...
0
votes
1answer
110 views

How to investigate this anomaly?

According to the IT managers, this problem is neither at the server nor at the client but is suspected to be somewhere inbetween e.g. some DNS server that has been infected. Do you recognize this ...
0
votes
1answer
1k views

DNS Cache Poisoning and Snooping

I'm trying to do two things here. The first is poison the cache of a target DNS server. A scan has suggested the network I'm attacking is vulnerable to CVE-1999-0024. My understanding of this ...
0
votes
1answer
501 views

How have DNS recursion attacks happened?

There are a few resources describing how to carry out DNS recursion attacks. Is there any good explanation to help me understand how these attacks work and if systems on my network are still ...
0
votes
3answers
707 views

DNS queries with hex string that is a SHA1 of a domain name! Is it a malware?

My computer does a lot of queries to strange domains such as: 56cea5c2b408989ab067adcb787d0f99209bbe07.mydomain.com The strange thing is that 56cea5c2b408989ab067adcb787d0f99209bbe07 is the SHA1 of ...
0
votes
1answer
356 views

Is using a local DNS cache server more secure than using a DNS server from a router?

Is using a local DNS cache server imore secure than using a DNS server from a router?
0
votes
1answer
26 views

Certificate validation Local DNS hosts file

I've a question regarding a certificate validation error I'm getting. I'm performing an https request from one machine to another (windows machines). On the destination machine I've configured a ...
0
votes
1answer
40 views

DNS sercure when using DNS crypt?

Is it the same security level like a VPN DNS wise when using Open DNS crypt servers plus DNS crypt proxy? I installed both packages in Ubuntu and now unless i have the right IP entry in the network ...