dns: search

dnstop: Monitor BIND DNS Server (DNS Network Traffic) From a Shell Prompt

nixCraft: "How do I find out and view current DNS queries such as A, MX, PTR and so on in real time? How do I find out who is querying my DNS server or specific domain or specific dns client IP address?"

Best DNS Service With API Access?

netaustin writes "My company runs quite a few media websites, mostly on Drupal, and about half on ec2. We have a good server setup with ec2 which allows us to route requests through Pound, a cluster of Varnish servers, then a cluster of Apache servers. We manage 50 domains (one per state) like this. Problem is, anytime things change, we have to manually adjust DNS for all 50 states, which is very boring and usually causes negative side effects too as we can't ever adjust all 50 DNS entries at once. We'd like to just change DNS providers and be done with it, but there are a lot of options, and I don't often shop for DNS services. I use EveryDNS for my personal domains, but I don't think they provide an API and it'd feel a little dishonest to reverse engineer the forms on their site since they're an esteemed donations-based service.

Infoblox Unveils "DNS Firewall" to Address DNS Vulnerability Concerns

SANTA CLARA, CA -- (Marketwire) -- 09/29/08 -- Infoblox Inc. today announced enhancements to its full line of core network services (CNS) appliances to provide unique DNS security capabilities such as alerting, reporting, and attack mitigation. These capabilities along with the automated software update capabilities of Infoblox grid technology -- which links multiple Infoblox appliances into a unified system for central management and control -- can help enterprises thwart current and future DNS vulnerability exploits.

dnstop: Monitor BIND DNS Server (DNS Network Traffic) From a Shell Prompt

"Log file can give out required information but dnstop is just like top command for monitoring dns traffic. It is a small tool to listen on device or to parse the file savefile and collect and print statistics on the local network's DNS traffic. You must have read access to /dev/bpf*. bpf (Berkeley Packet Filter) which provides a raw interface to data link layers in a protocol independent fashion. All packets on the network, even those destined for other hosts, are accessible through this mechanism."

Buck DNS Monoculture with BIND Alternatives

DNS is fundamental to network operations, but rather surprisingly, given the usual free/open source software community's habit of having multiple versions of everything, it has evolved into a DNS server monoculture dominated by ISC BIND (Berkeley Internet Name Domain). All other issues aside, such as security and performance, monoculture is not healthy. There's a whole world outside of BIND; a pleasant world full of DNS servers that are simple to configure, and reliable and secure to use.

Buck DNS Monoculture with BIND Alternatives

"Suppose you are running some public services, and you want to control your own authoritative DNS server. The alternative is to use a third-party service to manage your DNS, such as the hostmaster at your ISP, or your domain name registrar. But you would rather retain control yourself, for faster (and possibly better) service. While I think it is good for network and system administrators to have as much control as possible, the Internet is infested with mis-configured DNS servers, so please be careful and make sure you get it right."

DNS patches cause problems, developers admit

Patches released earlier this month to quash a critical bug in the Domain Name System (DNS) have slowed servers running BIND, the Internet's most popular DNS software, and crippled some systems using Windows Server.

DNS patches cause problems, developers admit

Patches released earlier this month to quash a critical bug in the Domain Name System (DNS) have slowed servers running BIND, the Internet's most popular DNS software, and crippled some systems versions of Windows Server.

DNS patches cause problems, developers admit

Patches released earlier this month to quash a critical bug in the Domain Name System (DNS) have slowed servers running BIND, the Internet's most popular DNS software, and crippled some systems versions of Windows Server.

DNS Attack Writer a Victim of His Own Creation

BobB writes "HD Moore has been owned. Moore, the creator of the popular Metasploit hacking toolkit, has become the victim of a computer attack. It happened on Tuesday morning, when Moore's company, BreakingPoint, had some of its Internet traffic redirected to a fake Google page that was being run by a scammer. According to Moore, the hacker was able to do this by launching what's known as a cache poisoning attack on a DNS server on AT&T's network that was serving the Austin, Texas, area. One of BreakingPoint's servers was forwarding DNS (Domain Name System) traffic to the AT&T server, so when it was compromised, so was HD Moore's company."

Infoblox Unveils 'DNS Firewall'

SANTA CLARA, Calif. -- Infoblox Inc. today announced enhancements to its full line of core network services (CNS) appliances to provide unique DNS security capabilities such as alerting, reporting, and attack mitigation. These capabilities along with the automated software update capabilities of Infoblox grid technology – which links multiple Infoblox appliances into a unified system for central management and control – can help enterprises thwart current and future DNS vulnerability exploits.

Howto Setup DHCP Server and Dynamic DNS with BIND in Debian

"The queries for unauthoritative domains will be forwarded to 192.168.99.1. You can put the DNS provided by your ISP there (or put the DNS from opendns.com)"

Tip: Patch BIND on your Mac OS X box to avoid DNS flaw

Terminal.app Last week, Ars reported that exploit code for a widely publicized flaw in the domain name system had gotten out into the wild, and hackers have started using the exploit. Though most vendors have released patches that protect against the DNS hack, Apple has yet to provide any sort of fix for Mac OS X. TidBIT's Glenn Fleishman has put together a great tutorial for those who would like to patch BIND, the software that runs DNS servers, in order to prevent any hackery.

Infoblox Unveils "DNS Firewall" to Address DNS Vulnerability Concerns

The Modern Contact Center and Workforce Management�s Vital Role Learn more, download free white paper.

DNS and Domain registration

I recently renewed a DNS subscription for a website for work but have now recieved an invoice from a different company to renew my domain name for the same website.

DNS patch causes BIND servers to go slow

Patches designed to address the DNS flaw that was recently made public have slowed servers running the Berkeley Internet Name Domain (BIND), which is used on the majority of name serving machines on the internet.

DNS patch slows BIND servers

Patches designed to address the recently publicized DNS flaw have slowed servers running the Berkeley Internet Name Domain (BIND) system, which is used on the majority of name-serving machines on the internet.

DNS Flaw Hits More Than Just the Web

gringer writes "Dan Kaminsky presented at the Black Hat conference in Las Vegas on Wednesday, and said that the DNS vulnerability he discovered is much more dangerous than most have appreciated. Besides hijacking web browsers, hackers might attack email services and spam filters, FTP, Rsync, BitTorrent, Telnet, SSH, as well as SSL services. Ultimately it's not a question of which systems can be attacked by exploiting the flaw, but rather which ones cannot. Then again, it could just be hype. For more information, see Kaminsky's power point presentation." Update: 08/07 19:48 GMT by T : There's also an animation of the progress of the patch.

DNS patch causes BIND blunder

The group responsible for maintaining the internet's most popular domain name software BIND has admitted it caused problems by fast-tracking a security patch designed to fix the widescale DNS flaw discovered by researcher Dan Kaminsky this month.

DNS patch causes BIND blunder

The group responsible for maintaining the internet's most popular domain name software BIND has admitted it caused problems by fast-tracking a security patch designed to fix the widescale DNS flaw discovered by researcher Dan Kaminsky this month.

Web 2.0, DNS flaws revealed at Black Hat

The DNS vulnerability scope proves to be huge, but an even bigger issue may be posed by the emerging Web apps

Apple DNS Security Patch Flawed, Leaves Users At Risk

Techzonez Apple finally rolled out a software update to fix the much-heralded Domain Name System (DNS) security flaw, but it seems the celebration may have been premature.

Kaminsky DNS Bug Claimed Fixed By 1-Character Patch

An anonymous reader writes "According to a thread on the bind-users mailing list, there is nothing inherent in the DNS protocol that would cause the massive vulnerability discussed at length here and elsewhere. As it turns out, it appears to be a simple off-by-one error in BIND, which favors new NS records over cached ones (even if the cached TTL is not yet expired). The patch changes this in favor of still-valid cached records, removing the attacker's ability to successfully poison the cache outside the small window of opportunity afforded by an expiring TTL, which is the way things used to be before the Kaminsky debacle. Source port randomization is nice, but removing the root cause of the attack's effectiveness is better."

Patches Put DNS in a BIND

Servers running Berkeley Internet Name Domain (BIND) have experienced a slowdown when trying to install the new DNS patch. There have been reports of systems running versions of Windows Server being crippled. The Internet Systems Consortium, the group responsible for the BIND software, says a second round of patches will address the performance issues.

Search took 0.02 seconds.