0
votes
2answers
74 views

Protecting my Bind dns server from slow kaminsky-style cache poisoning attacks

Dan Kaminsky described how DNS servers could be poisoned with spoofed DNS responses [1]. As I understand it, the problem was that Kaminsky found a way to account for most other sources of randomness ...
0
votes
1answer
53 views

DNS request anomaly

Experts, i have some problem in DNS servers configuration, network diagram is shown in figure: The problem is manifesting as follows: There're 2 DNS servers servicing both internal and external ...
0
votes
2answers
81 views

Spoofing NS records for pre-transfer DNS testing

I'm about to transfer a domain from one registrar and DNS provider to another, and I want to test the new DNS host before starting the transfer. The new host provides plain DNS service beforehand, so ...
0
votes
3answers
742 views

Exchange and SPF Records

I've created an SPF record on 123-Reg, which is working great. But my question is how Exchange servers know that an SPF record exists when they receive mail from a domain. How does Exchange know it ...
6
votes
5answers
514 views

Any way I can correct DNS spoofing against our domain

This morning I found out that our domain and subdomains have been poisoned on the 4.2.2 and 4.2.2.1 DNS servers along with others I think, though I have not confirmed others yet. Using OpenDNS ...
0
votes
1answer
386 views

How to avoid sendmail relay domains spoofing

I have a bunch of domains as relay domains at my sendmail config, i noticed that some dirty botnet is using dns spoof to be able to send emails using those relay domains. How it works: a domain ...
0
votes
1answer
819 views

Redirecting requests from domain to local server

I'm developing a web application for a pre-production hardware device which has the domain from which it loads the app hard-coded. Is there a (simple) way for me to reroute these requests to a local ...
1
vote
3answers
946 views

How to avoid DNS spoofing for DNS lookup

I am trying to find a way to obtain the real ip addresse(s) for a domain name. I'm working on a router doing traffic shaping with the use of iptables and tc. I then need to setup iptables rules for ...
47
votes
15answers
7k views

Are IP addresses “trivial to forge”?

I was reading through some of the notes on Google's new public DNS service: Performance Benefits Security Benefits I noticed under the security section this paragraph: Until a standard ...