The Domain Name System (DNS) translates Internet domain and host names to IP addresses.

learn more… | top users | synonyms

1
vote
2answers
64 views

Are IPs and domains in malwaredomainlist.com compromised?

I did an nmap scan on a website that is being hosted by a hosting company. The results showed a rDNS record with an ip and a domain name. When I googled the domain name it appeared in ...
1
vote
1answer
57 views

Firewall egress filtering by domain

In our production environment, we are connecting to a few core external service providers though their APIs and are required to have all other services blocked (PCI DSS). We currently have a firewall ...
2
votes
0answers
40 views

DNSspoof not working

My aim is to DNSspoof. My network is using a wireless router with the address 192.168.1.1 and primary DNS is the same as the router address. I have enabled Kernel IP forward in Linux. DNS host file ...
2
votes
0answers
44 views

DNS Server Recursive Query Cache Poisoning Weakness “Bounce DoS”

Tenable Nessus states that if there is a DNS Server Recursive Query Cache Poisoning Weakness the host allows recursive queries via UDP, then the host can be used to 'bounce' Denial of Service attacks ...
1
vote
0answers
29 views

Does DNSSEC still have the “enumerate all names in zone” problem?

According to Wikipedia: DNSSEC introduces the ability for a hostile party to enumerate all the names in a zone by following the NSEC chain. NSEC RRs assert which names do not exist in a zone ...
1
vote
0answers
89 views

Why would home routers accept incoming DNS traffic?

I stumbled upon an interesting paper (PDF Link) where researchers found out that more than 58% of the DNS open resolvers that are blamed in DDoS attacks are in fact home routers distributed by ISPs to ...
1
vote
0answers
64 views

Does DNSSEC provide signed statements that a certain domain does NOT yet support DNSSEC? If not, why not?

In my security class with David Wagner, we talked about some of the reasons why DNSSEC is not widely adopted right now. One of the reasons was that for backward compatibility reasons, clients need to ...
1
vote
0answers
69 views

RHS Blocklist, Other blocklists and impacts of RHS blocking on similar domains

I am not very familiar with Blocklists so had a few queries around it. I have a sub-domain example.com which is used to send mass marketing emails i.e. emails are sent from no-reply@example.com. A ...
0
votes
0answers
74 views

'google.com' DNS resolved to addresses of ISP

When I open cmd.exe and do nslookup on google.com I am getting a set of addresses that belong to my ISP. More than that, even when I try to run server 8.8.8.8 or server 8.8.4.4 and query for ...
0
votes
0answers
27 views

Behaviour of DNS query packet

When the configured name server resolver is not reachable, the query packet will retransmitted after certain t times (in windows, every 1 seconds until 8 seconds,max). The behaviour of the legitimate ...
0
votes
0answers
22 views

Shouldn't DNSCurve be parallel to DNSSEC at root level for diversity?

As per the answer at If DNSSEC is so questionable, why is it ahead of DNSCurve in adoption?, it's been determined that one of the reasons that DNSCurve is behind DNSSEC is due to the nature of the ...
0
votes
0answers
61 views

Silent security on android

I saw a DEFCON talk about owning back a stolen PC/Mac, with a SSHd daemon and a dynamic-ip service installed,running in background. I was wondering if is it possible to achieve tha same results on an ...