As I understand after a Domain Name is resolved to a specefic IP through DNS
www.example.com resolves to
10.10.10.10, this cache is saved in RAM in a computer for a little bit, AKA five or so minutes. (Note: Correct me if I'm wrong)
So, when I DNS spoof a computer to resolve
www.whatevs.com to the IP of my website clone running on my local apache server: 192.168.1.5 . Then it does what it does and it is finished. But, the problem is after the attack is finished and I stop DNSSpoofing, the computer saves
192.168.1.5 for a little while after, before it runs a DNS resolution lookup again to resolve the real IP. Does anyone know how to stop this by making the computer lose the cache, or forget
www.whatevs.com's fake IP address, so it must re-resolve it? Thanks!