The Domain Name System (DNS) translates Internet domain and host names to IP addresses.

learn more… | top users | synonyms

2
votes
1answer
82 views

Does DNSSEC provide signed statements that a certain domain does NOT yet support DNSSEC? If not, why not?

In my security class with David Wagner, we talked about some of the reasons why DNSSEC is not widely adopted right now. One of the reasons was that for backward compatibility reasons, clients need to ...
2
votes
1answer
571 views

DNS: Conditional Forwarding

I'm currently attempting to track down a problem with a Websense Web Filter breaking SSL connections for sites in a conditional forward. To do this, I need to know exactly how a conditional forward ...
2
votes
1answer
754 views

Clear the DNS server's cache?

Is there anyway for the attacker to clear the cache of a DNS server in order to poison it? For example, if someone attacked my DNS server in an attempt to spoof Google.com, they will receive the ...
2
votes
0answers
795 views

Can SSH tunneling over DNS tunnel work in China to use free WiFi at airport?

I have followed a tutorial here: http://ebnj.net/sshoverdns/ This tutorial tells us how to carry all internet traffic via DNS tunnel if your airport enables no-limit outgoing DNS. This guides us to ...
2
votes
0answers
57 views

bind9 resolves all queries to one address - a compromised server?

Since this morning we tried to open some SSL sites and were greeted by browser warnings, that certificate is not for this site. Upon checking the certificate, we determined that it is issued to *....
2
votes
2answers
33 views

DNS IP address auto reset

I have a unofficial Windows and i noticed that my internet connection gets reset. By taking a closer look at it, i found that the DNS server address is set to an IP in China. Any reason why this ...
2
votes
0answers
211 views

DNS Server Recursive Query Cache Poisoning Weakness “Bounce DoS”

Tenable Nessus states that if there is a DNS Server Recursive Query Cache Poisoning Weakness the host allows recursive queries via UDP, then the host can be used to 'bounce' Denial of Service attacks ...
2
votes
1answer
1k views

External network DNS spoofing

I've been thinking recently if its possible to DNS spoof an external network. Let's say for example you are attacker.com and your victim is of course victim.com. Then I've thought of 2 scenarios: 1. ...
2
votes
0answers
2k views

Hack scenario when a person has a non-superuser shell [closed]

Suppose that there are following three machines in the network: Machine A: Microsoft Server 2003 Service Pack 2 FileZilla 0.9.29 beta ftp server (TCP 21) Mcafee ePolicy server (81), remote desktop ...
1
vote
3answers
135 views

Are different top level domains somehow different security wise?

If so why is the difference? I've tried to google it but nothing relevant was found.
1
vote
3answers
139 views

Can a rogue DNS server see my passwords?

Recently I've been testing a couple DNS servers to see which one performs the fastest because I need a really fast connection. On to my point, if I were to use a malicious DNS, could they see my ...
1
vote
2answers
469 views

Google DNS in Firewall logs

I was viewing my firewall logs and come across the IP 8.8.8.8. Further check reveals it belongs to Google DNS. And such traffic has been going out from some of our LAN segment PCs. From here on, how ...
1
vote
2answers
222 views

Roommate Frequently Hacked — How Do I Protect My Network/Devices?

If you absolutely had to share a network with a user who had a very lax approach to security and was frequently hacked (1-2x month for over a year now), what might you consider doing to secure your ...
1
vote
2answers
302 views

anti virus acting up/DNS poisoning

I was running my desktop and the AV deleted a file that it said was a virus (this was not during a scan, just normal usage). Now I'm just browsing the web and I got a couple of DNS poisoning attacks ...
1
vote
3answers
996 views

Preventing 3rd party DNS Servers from being used

While using a wireless network recently that implemented a captive gateway, I noticed that any third party DNS servers manually set would not allow the network to connect properly. This would seem ...
1
vote
3answers
37 views

Are two DNS MX records pointing to the same IP a availability risk (single point of failure)?

Are two DNS MX records pointing to the same IP a availability risk as in a single point of failure (SPOF)? Even if there are three DNS MX records in total for example: mx1.example.com 192.168.1.1 ...
1
vote
1answer
35 views

Man in the middle with certificate signed by known CA and DNS spoofing can work?

Assuming that I have a certificate for my local webserver signed by a well known CA like Verisign (so it will be trusted by browsers), and I'm able to DNS poisoning in Man-in-the-Middle to redirect a ...
1
vote
3answers
141 views

What SSL certificate do I need?

I have 2 domains, one where the website is hosted (lets call it www.a.com), and another (lets call it www.b.com) which has a CNAME record pointing to the first one (www.a.com). Which one should have a ...
1
vote
1answer
284 views

How to bypass DNS spoofing protection

I know that SSL certificates prevent DNS spoofing, but I was wondering why it is not possible after ARP cache poisoning to set up iptables rules and redirect the origin destination to fake page?
1
vote
3answers
128 views

TLS domain name mismatch

Suppose I want to talk to example.com over TLS the and server I am redirected to is foo.com. But during the handshake it can prove it holds the private key that matches example.com certificate. Why ...
1
vote
2answers
432 views

Difference between DNS spoofing and phishing [closed]

I am writing a bachelor thesis and I am having a hard time figuring out the difference between phishing and DNS spoofing. From what I understand, DNS spoofing is a way to achieve a succesfull phishing ...
1
vote
1answer
146 views

Force DNS to attach bad IP address

The question is not professional, but what I'm trying to say is... Is there any way to inject or force the DNS server to attach/change an IP address for some site. For example, I'm running an apache ...
1
vote
1answer
101 views

DNS Redelegation - Security Risk?

I am a web developer and I use Adobe Business Catalyst. To use some of their services it is recommended you redelegate the domain. In other words change the nameservers to Business Catalyst. I have ...
1
vote
1answer
432 views

Assuming no MITM, is Gmail communication 100% secure and private?

I sometimes have to use my personal Gmail account from my company workstation, where I know for fact they are using content-aware firewall(s) like Palo Alto, and potentially other nasty things like ...
1
vote
1answer
283 views

How does http://un****-us.com/ work?

There is this site un**-us.com which supposedly allows you to bypass ISP rules such as content restriction on a particular area. Now , it is well known that routing your traffic through a web proxy ...
1
vote
1answer
5k views

What are the risks of removing ISATAP from the default global block list?

The process of installing Microsofts pseudo VPN called Direct Access requires me to remove the ISATAP name from the default global block list by running this command: dnscmd /config /...
1
vote
2answers
46 views

Strange apple dns answers

Could someone please explain to the results of a reverse DNS lookup I ran? dig -x 17.178.96.59 I was expecting apple.com but it also listed a whole load of PTR's. Many looked like phishing sites like ...
1
vote
2answers
91 views

How do web hosts know you own your domain?

Let's say I registered a domain on Namecheap and want DigitalOcean to be my host. This can be achieved by first setting the nameservers to DigitalOcean in Namecheap's backend: Second, we add some ...
1
vote
1answer
42 views

Does DNSCrypt mask/hide the URLs I visit

I use DNSCrypt (https://dnscrypt.org/) and I'd like to know whether it's useful to mask/hide from my ISP (Telecom) the HTTP requests I make in my browser. And how does it protect me? Thanks
1
vote
1answer
119 views

Does using FreeDNS introduce a security risk?

If you use a service like FreeDNS for a DNS, does this introduce any additional security risk as opposed to simply paying a registrar? Obviously the owner of FreeDNS could hijack your domain. But ...
1
vote
2answers
68 views

Could my DNS requests get manipulated while using tor?

I just downloaded Tor Browser Bundle and extracted it. I had no copy of my Tor Nodes Settings so i just browsed using the standard nodes and i forgot to disabke Java Script. I did not notice ...
1
vote
2answers
171 views

Using DNS to track browser activity on a LAN

I am trying to create a small network auditing script that tracks HTTP and HTTPS domain names visited by certain hosts using the libpcap wrapper for Nodejs. At its best the script would be able to ...
1
vote
1answer
257 views

DNS queries to compromise DNS cache

The transaction ID for DNS queries can take values from 1 to 65,536 and my computer pseudorandomly chooses one for each DNS request. If I sents 1,024 false replies per request, how many requests ...
1
vote
1answer
219 views

Network enumeration protection [closed]

I was reading about DNS security, and readed about Zone Transfer and how can be used to retrieve host information of a network, so not allowing Zone Tranfer from external sources will be the solution ...
1
vote
1answer
524 views

Following redirects from HTTPS to HTTP - Secure?

So I have an HTTP client which supports HTTPS. However, it doesn't follow the HTTP spec recommendation for redirects on POST(which is to ask the user before redirecting) This means, in theory, if you ...
1
vote
2answers
6k views

Anyone out there using Umbrella from OpenDNS? What exactly is it?

I'm still looking for a centrally-managed AV/malware management system and I've been testing out both Panda and Webroot (due to their 'cloud-based' structure that doesn't require a server for me to ...
1
vote
2answers
21 views

Does the use of the non-registered domains in SPF records introduce a security risk?

Recently I was reading about the Sender Policy Framework (SPF) record syntax on OpenSPF.com. Sender Policy Framework (SPF) is a simple email-validation system designed to detect email spoofing by ...
1
vote
1answer
43 views

How are DNS requests sent when using ovenvpn? Are they encrypted?

I use openvpn in thru the gnome network manager. When my computer is connected to the vpn do DNS requests look like they come from the vpn exit ip or from my real ip? Are the DNS requests sent in the ...
1
vote
1answer
39 views

Network Scans Find Absent Device

Using Nessus (an uncredentialed full scan) and Nmap (essentially a full port scan), I am finding a phantom device. This device is supposed to be a well-out-of-commission device, but is returning a ...
1
vote
1answer
75 views

Can you force your PC or device to use only DNSSec-verified lookup results?

Okay, I'll admit something first-off: I don't really understand some of the practical aspects of how DNSSec protections work very well.(Even after reading resources like this.) Well, I certainly ...
1
vote
1answer
40 views

What are the real risks of enabling unsecure DNS updates on Active Directory intranet domain?

Based on my current research, enabling the unsecure DNS updates is a requirement for enabling DHCP Linux clients from registering their names with a FQDN. While this works fine for Windows machines ...
1
vote
1answer
155 views

Using dnscrypt on a public hotspot with a captive portal

What strategy shall I take if I wanted to use a dnscrypt with a public hotspot that requires login through a captive portal? Such hotspots require DNS settings to point to their servers (via DHCP) so ...
1
vote
1answer
402 views

Is DNS secure when using DNS crypt?

Is it the same security level like a VPN DNS wise when using Open DNS crypt servers plus DNS crypt proxy? I installed both packages in Ubuntu and now unless I have the right IP entry in the network ...
1
vote
2answers
189 views

Using free subdomains to circumvent web filtering systems

(I was told that this was the place to ask this by someone from Webmasters, if I've got it wrong again please give me a chance!) I'm running a personal proxy service for the use of myself and some of ...
1
vote
1answer
388 views

Root/Naked domain and DDOS

Some services like Github has DDOS mitigation measures for their root/naked domain, but not other subdomain(s). What so special about the root domain concerning the DDOS attacks? [1] http://...
1
vote
1answer
294 views

DNS zone size overload?

Is it possible to DOS DNS by creating custom dns zones with lots of text records in them so that the size of the DNS zone is in the order for example 100 Gigabyes, and then query all the dns records ...
1
vote
1answer
634 views

Proxy aware or DNS capable meterpreter?

I'm having issues traversing a proxy protected network and was wondering if there are meterpreter implementations which allow proxy awareness (automatically using windows AD credentials) or which can ...
1
vote
1answer
5k views

Is it safe to use namebench?

As the title states is Google's namebench utility safe to run on my Mac and let it use Safari's web history?
1
vote
1answer
736 views

Should Windows 2008 R2 be used as an externally facing DNS name server?

When compared to more traditional DNS name servers, what are the benefits / drawbacks of using a Windows 2008 R2 as a public ns record for a company. What limitations, or security issues would I ...
1
vote
1answer
64 views

Is it a security risk, lack of knowledge for reactive action, when abuse mail is rejected?

When inspecting the DNS configuration for example with dnsinspect.com, the following shows up sometimes (note I used example.com): Accepts Abuse Address WARNING: Found mail servers which are not ...