Questions tagged [dns]

The Domain Name System (DNS) translates Internet domain and host names to IP addresses.

Filter by
Sorted by
Tagged with
24
votes
5answers
5k views

Why is DNS-over-HTTPS such a big security nightmare compared to DNS-over-TLS?

I've heard the argument against DNS-over-HTTPS that it is supposed to be a security nightmare for network defenders because it enables encrypted DNS over port 443, compared to DNS-over-TLS which goes ...
0
votes
1answer
74 views

dig returns different MX record, can anyone explain why?

I have a domain lets call it example.com when I do: dig example.com MX +short, it returns: 10 mx1.[Internet_Service_Provider_Domain] so, I decided to trace the DNS to check if there any possible DNS ...
1
vote
1answer
64 views

How do DoT and DoH facilitate fingerprinting by resolver operators?

https://dnscrypt.info/faq/ states for both DNS over HTTPS and DNS over TLS that it Provides more information than regular DNS to resolver operators in order to fingerprint clients How so?
1
vote
1answer
115 views

DNS 3rd party risks

I'd like to know what are the risks having a subdomain managed by third party. For example, I manage my own DNS servers to serve mydomain.example which provide some internal and public content. If I ...
0
votes
1answer
54 views

DKIM and CNAME or DNAME

As far as I understand, there should be no problems with using CNAME or DNAME records in connection with DKIM. That is, while the DKIM record for verifiying a mail from someone@example.com wants to be ...
0
votes
0answers
27 views

How do I block incoming and/or out-going WhatsApp traffic/requests on a Google Wifi Router? [migrated]

I'm interested in methods/solutions for blocking incoming and/or out-going WhatsApp requests and/or traffic on a personal home Google WiFi network. I also have the Google WiFi app with manager/admin ...
0
votes
1answer
65 views

How does openvpn work for only certain servers?

I got a *.openvpn from work and I monitored the traffic on wireshark. On my normal vpn every traffic is routed via the vpn (as expected). But with this work vpn only the traffic that uses the work ...
2
votes
0answers
61 views

HTML Injection to blind SSRF testing retrieves only DNS Query

I recently came across an application that was vulnerable to HTML injection on the invite function. When I insert <img src="image.jpg"> the image got rendered on the mail I received. I ...
3
votes
1answer
190 views

Is there a security vulnerability in setting a public DNS entry to a private IP Address?

I recently set up a wireguard server-network configuration with a home server and client devices. I have one main domain that I hope to route everything through via subdomains (in this example, abc....
12
votes
1answer
2k views

Hijacking stale DNS entry to point to your own website

Context and system configuration: AWS EC2 instance with a public IP address AWS Route53-managed DNS with a somesubdomain.somedomain.io pointing to the above IP address Above AWS EC2 instance was not ...
0
votes
1answer
184 views

Does it make sense to use CloudFlare's DNS in addition to NordVPN?

Starting at the Computer level, NordVPN gets installed. But according to the experts who know a lot better, a VPN isn't good enough. So going to the router's IPv4 network settings, the default DNS is ...
2
votes
2answers
60 views

Problems with using a non-reserved top-level domain for local DNS resolution

A network administrator at my organization (let's call him "Bill") wants to configure an internal DNS with the live top-level domain (TLD) .int for internal IP address resolution (for Active ...
0
votes
1answer
56 views

Why can I still receive email at my old domain after someone else bought it?

My domain expired years ago and was registered by another party. I have already read Can someone read my E-Mail if I lose ownership of my domain? and see that the answer is yes. Now if someone buys ...
0
votes
0answers
61 views

Is there any reason not to enable DNSSEC? [duplicate]

Google Domains' DNS management has a link that says Enable DNSSEC. And, as I understand it, this prevents spoofing of DNS responses. And, that sounds great! So, why wouldn't I want to enable DNSSEC? ...
-2
votes
1answer
58 views

How did these entries get into the Public DNS? [closed]

try ping these (and everything in between) 021111111111 021555555555 What are they?
1
vote
0answers
62 views

Why are DNS prefetch requests sent in clear text with DNS over HTTPS enabled?

I am trying to understand how DNS-over-HTTPS (DoH) works in both Chrome and Firefox browsers. To do so, I have enabled DoH on each browser and set the DNS provider to Cloudflare DNS servers (1.1.1.1 ...
2
votes
2answers
60 views

Impersonation of TLS host with own wlan network

Problem: I have a local machine (IoT, lets call it MCC) which connects via SSL to a website (mcc.com) to get some JSON data. I would like to send modified JSON from my own server. Idea: Setup a local ...
2
votes
1answer
64 views

How to find out where CNAME had resolved to in the past?

Are there any tools for this? I am doing some research into pentesting and subdomain takeovers with cloud providers like AWS and Azure. I have a list of subdomains (A records) that could be used for ...
2
votes
1answer
124 views

Seems my CNAMEs got “curled”. Somebody please explain this to me

According to my CloudFlare firewall logs, somebody went through each of my subdomains. My website is not advertised, it doesn't even show on Google unless typing the exact domain name into it. I think ...
0
votes
0answers
58 views

Monitor HTTPS URL logging of a specific device of a Network

Goal The main goal is to monitor all the URL logging (HTTPS) of a specific device in my Network. So I’m decided to buy a Security tool WifiPineApple from Hak5 store. Ex. Alexa, Chromecast, and maybe ...
32
votes
6answers
4k views

Is it possible for a name server provider to hijack MX records?

Let’s say: We buy a domain from http://cheap-unsecure-domains.example. Then in our control panel at cp.cheap-unsecure-domains.example we configure it to use the Cloudflare service. We set some MX ...
0
votes
1answer
38 views

Spoofed DNS answers ignored by target machine applications

Attacker: Arch Linux Target: Windows 10 Scenario The attackers launches an ARP spoof attack to redirect all target traffic to the attacker. (This works) The target sends DNS queries for domain name ...
0
votes
0answers
52 views

Disable mdns-publisher on Linux?

I just installed a firewall and other security-related software on my Linux machine (Ubuntu 18.04), and after reading about them, decided to disable two services that I did't need with: sudo ...
2
votes
1answer
108 views

How dangerous is it to open my DNS server to the world?

I'm using pihole as my DNS on the LAN but I'm trying to use it as my "global" DNS server wherever I am on the planet. One solution is to use a VPN on my LAN and pihole being set as the default DNS ...
1
vote
2answers
88 views

What stops a malicious DNS subdomain provider from impersonating my website?

First, some background: The DNS-01 verification method of Let's Encrypt requires you to add a TXT record to a special subdomain your domain name to prove your identity. With ACMEv2, this can allow you ...
1
vote
2answers
43 views

Private Authoritive Recursive DNS

In the bind9 config (Centos8) there is a note saying If you are building an AUTHORITATIVE DNS server, do NOT enable recursion. I would like to know why and if this is still a concern if the DNS ...
0
votes
1answer
116 views

Does Unbound re-use TLS connections for DoT forwarding?

Unbound has the option to use DNS over TLS as an upstream (through the forward-tls-upstream setting). CludFlare's 1.1.1.1 service offers this; also through TOR. My question is whether Unbound will ...
0
votes
0answers
13 views

Search for Passive DNS Replication database [duplicate]

I'm looking for a Passive DNS Replication database. It exists in virustotal and securitytrails. Is there a more comprehensive database of dns data by IP address?
1
vote
1answer
57 views

Is the _acme-challenge subdomain protected?

I was looking into the DNS-01 challenge of Let's Encrypt, and I had a question about the subdomain process [1]. Let's say, the website example.com gives away free subdomains; what stops me to request ...
2
votes
1answer
82 views

Transfer requests for localhost zone on my bind DNS server

I use Debian stretch and Bind 9.10.3 as my DNS server. Today I saw the following entry in my log file: Apr 17 23:04:22 ns named[111]: client 45.83.65.112#48974 (localhost): transfer of 'localhost/IN'...
2
votes
1answer
53 views

DNS cache snooping protection

Is it possible to protect against DNS cache snooping on ISC bind and PowerDNS servers? If not, is there a similar DNS server software which can't protect agains snooping?
0
votes
0answers
20 views

Does installing and routing OpenVPN DNS queries through a local resolver make any difference to the IP address seen by the eventual DNS server?

This is related to my previous question - When pushing a DNS resolver to an OpenVPN client, does the resolver see the IP address of the client or the OpenVPn server?. If an OpenVPN server ...
0
votes
1answer
33 views

When pushing a DNS resolver to an OpenVPN client, does the resolver see the IP address of the client or the OpenVPn server?

When configuring an OpenVPN server, you have the option of pushing DNS resolvers to the client - like so: push "dhcp-option DNS " If this approach is used and a public DNS resolver is defined, will ...
134
votes
2answers
24k views

Why is “fhepfcelehfcepfffacacacacacacabn” a top DNS query from my devices?

I recently set up NextDNS on my personal devices to further reduce the amount of tracking and ads I'm exposed to. The service comes with built-in analytics that shows a brief overview of your network ...
1
vote
1answer
122 views

Can a DNS query source be spoofed?

Will the DNS server reply to the spoofed address if you send a DNS request on behalf of it? What I'm trying to ask isn't DNS spoofing but spoofing the source address.
0
votes
0answers
15 views

Do I have to be careful about DNS I'm using? [duplicate]

There's some website which I can't have access to and they return 403 error to me. On the other hand, there are some DNS servers, where if I use them, I can have access to those websites! Does using ...
0
votes
1answer
107 views

Can I intercept DNS-over-HTTPS (DoH) or -TLS (DoT) in my home network?

Right now I am redirecting all local network DNS traffic to my Pi-hole install, since some device do or may in the future use hardcoded DNS servers to bypass filtering. Since DNS-over-HTTPS and DNS-...
0
votes
0answers
35 views

Updating Ubuntu [duplicate]

How can I make sure in the terminal that my Ubuntu updates are from the real source? I am asking because I know that one download was fake. It was rkhunter. The update was malware. Done from Bangkok....
1
vote
1answer
63 views

What portion of recursive (ISP, public, etc.) nameservers validate DNSSEC strictly?

I'm adopting/setting up DNSSEC on my domains for the first time, and curious about the practical benefits I can expect. In theory, regardless of whether client/stub resolvers want checking, recursive ...
0
votes
0answers
53 views

Can you use a domain to forward web traffic at DNS to another domain but still use the MX record for this domain

What I am attempting to do is ensure all ingress web traffic [http(s)] to exampledomain1.com forwards to exampledomain2.com but I still want to use the MX record of exampledomain1.com to point to at ...
0
votes
2answers
54 views

What difference to privacy will I get if i change my workplace wifi DNS to static ones on my iPad? [duplicate]

I access internet at my workplace with an iPad that has workplace profile installed on it. This allows me to automatically connect to the company wifi, along with their own DNS settings. If I change ...
4
votes
3answers
472 views

Why are DNS requests visible with DNS over HTTPS enabled?

So, Firefox 73 rolled out today and with it comes a new DNS option called NextDNS. I thought of giving it a shot and clicked "Enable DNS over HTTPS" and selected NextDNS. Now, my understanding of ...
0
votes
1answer
95 views

DNS communicating with a remote host on an unusual server port 53

We have an Active Directory EC2 server on AWS US East region that has DNS enabled to resolve only internal hostnames. It is not reachable from any hosts on the public internet. Recently we enabled an ...
1
vote
1answer
62 views

Basic Auth exposed to ISP/DNS?

Would someone using basic authentication in a URL such as https://username:password@example.com have their credentials be visible to their ISP or DNS?
0
votes
1answer
76 views

Should a DNS server restrict reverse lookups from external hosts?

What risks are there in allowing external clients to resolve internal IPs to their domain names? The server is used internally for clients, as well as for external clients needing to resolve a web ...
0
votes
1answer
391 views

Verify Quad9 is working

Disclaimer: I am a complete neophyte. I set 9.9.9.9, Quad9, as my DNS in my router's configuration. How do I verify Quad9 is working and that I am benefiting from its features, especially encrypted ...
1
vote
1answer
411 views

How does proxychains avoid DNS leaks?

Also directly related, how are the DNS servers queried when using proxychains? Assume I'm using Tor for proxychains. If I uncomment the DNS part of proxychains.conf, my requests supposedly get sent ...
1
vote
1answer
64 views

Can I test ssl connection locally with a valid certificate (CA) with local dns?

I have a wildcard valid certificate signed by Certificate Authority. Is it possible to test the https locally from the server without a registered DNS? My idea is to bind the domain name with 127.0....
0
votes
1answer
96 views

Does Kerberos authentication handle DNS names the same way between Windows 7 and Windows 10?

Recently, we migrated from Windows 7 to Windows 10 and during that migration, we progressively ran into some issues with our NAS device. To be more precise, we progressively noticed some tcp socket ...
1
vote
2answers
117 views

Why did browsers choose to implement HSTS with Preload over checking custom DNS information?

Browsers and standards bodies favor HSTS with Preload because it avoids ever sending an http request to a website that supports https. This is good, because cleartext http requests can be intercepted ...

1
2 3 4 5
14