About DNS Interception

Sometimes, in a simulated public network environment, all the data accessing a page is required. No matter what access domain name you enter, it will be resolved to a page. How can this problem be achieved? In fact, this can be done through DNS interception. I will share the following configuration methods:

[Install DNS role]

1) As shown in, click the "Server Manager" icon;

650) This. width = 650; "Height =" 33 "Title =" image "style =" margin: 0px; Border: 0px; padding-top: 0px; padding-Right: 0px; padding-left: 0px; Background-image: none; "alt =" image "src =" http://img1.51cto.com/attachment/201407/25/1056852_1406277274fGCc.png "border =" 0 "/>

2) on the displayed page, select "add role" under the role ";

650) This. width = 650; "Height =" 184 "Title =" image "style =" border: 0px; padding-top: 0px; padding-Right: 0px; padding-left: 0px; background-image: none; "alt =" image "src =" http://img1.51cto.com/attachment/201407/25/1056852_1406277274WUsA.png "border =" 0 "/>

3) on the page shown, click "Next;

650) This. width = 650; "Height =" 368 "Title =" image "style =" border: 0px; padding-top: 0px; padding-Right: 0px; padding-left: 0px; background-image: none; "alt =" image "src =" http://img1.51cto.com/attachment/201407/25/1056852_1406277274ytNb.png "border =" 0 "/>

4) on the displayed page, select "DNS server ";

650) This. width = 650; "Height =" 366 "Title =" image "style =" border: 0px; padding-top: 0px; padding-Right: 0px; padding-left: 0px; background-image: none; "alt =" image "src =" http://img1.51cto.com/attachment/201407/25/1056852_1406277274OlUa.png "border =" 0 "/>

5) on the page shown, select "Next;

650) This. width = 650; "Height =" 373 "Title =" image "style =" border: 0px; padding-top: 0px; padding-Right: 0px; padding-left: 0px; background-image: none; "alt =" image "src =" http://img1.51cto.com/attachment/201407/25/1056852_1406277279Gv1k.png "border =" 0 "/>

6) on the page shown, click "Install ";

650) This. width = 650; "Height =" 377 "Title =" image "style =" border: 0px; padding-top: 0px; padding-Right: 0px; padding-left: 0px; background-image: none; "alt =" image "src =" http://img1.51cto.com/attachment/201407/25/1056852_1406277279Ciu7.png "border =" 0 "/>

7) after the installation is complete, click the close button;

[Configure DNS server]

You should know that there are ~ M, the 13 root DNS services (as shown in), so no matter how you resolve them, as long as your DNS resolution is normal, data cannot be resolved locally and will be transferred to the root DNS for processing, to intercept all DNS resolution records to your DNS server, you can simply make yourself a root DNS, as shown in:

650) This. width = 650; "Height =" 403 "Title =" image "style =" border: 0px; padding-top: 0px; padding-Right: 0px; padding-left: 0px; background-image: none; "alt =" image "src =" http://img1.51cto.com/attachment/201407/25/1056852_1406277279I4XE.png "border =" 0 "/>
1) on the page shown, right-click "new region"

650) This. width = 650; "Height =" 350 "Title =" image "style =" border: 0px; padding-top: 0px; padding-Right: 0px; padding-left: 0px; background-image: none; "alt =" image "src =" http://img1.51cto.com/attachment/201407/25/1056852_14062772794C0u.png "border =" 0 "/>

2) on the page shown, click "Next;

650) This. width = 650; "Height =" 333 "Title =" image "style =" border: 0px; padding-top: 0px; padding-Right: 0px; padding-left: 0px; background-image: none; "alt =" image "src =" http://img1.51cto.com/attachment/201407/25/1056852_1406277280JkQ0.png "border =" 0 "/>

3) on the "region type" page, click "Next;

650) This. width = 650; "Height =" 351 "Title =" image "style =" border: 0px; padding-top: 0px; padding-Right: 0px; padding-left: 0px; background-image: none; "alt =" image "src =" http://img1.51cto.com/attachment/201407/25/1056852_1406277280GbQq.png "border =" 0 "/>

4) enter the decimal point under the region name shown in, and click "Next;

650) This. width = 650; "Height =" 348 "Title =" image "style =" border: 0px; padding-top: 0px; padding-Right: 0px; padding-left: 0px; background-image: none; "alt =" image "src =" http://img1.51cto.com/attachment/201407/25/1056852_1406277280graj.png "border =" 0 "/>

5) on the page shown, click "Next;

650) This. width = 650; "Height =" 363 "Title =" image "style =" border: 0px; padding-top: 0px; padding-Right: 0px; padding-left: 0px; background-image: none; "alt =" image "src =" http://img1.51cto.com/attachment/201407/25/1056852_140627728006gu.png "border =" 0 "/>

6) on the "Dynamic Update" page, click the "Next" button;

650) This. width = 650; "Height =" 370 "Title =" image "style =" border: 0px; padding-top: 0px; padding-Right: 0px; padding-left: 0px; background-image: none; "alt =" image "src =" http://img1.51cto.com/attachment/201407/25/1056852_1406277280MI3N.png "border =" 0 "/>

7) on the page shown, click "finish;

650) This. width = 650; "Height =" 379 "Title =" image "style =" border: 0px; padding-top: 0px; padding-Right: 0px; padding-left: 0px; background-image: none; "alt =" image "src =" http://img1.51cto.com/attachment/201407/25/1056852_1406277280SmUI.png "border =" 0 "/>

At this point, let's see that the 13 root DNS is no longer displayed, and we are the most authoritative root DNS server in our network, as shown in:

650) This. width = 650; "Height =" 446 "Title =" image "style =" border: 0px; padding-top: 0px; padding-Right: 0px; padding-left: 0px; background-image: none; "alt =" image "src =" http://img1.51cto.com/attachment/201407/25/1056852_1406277281YlSl.png "border =" 0 "/>

In the DNS console, we can also see that the region we created is the root, as shown in:
650) This. width = 650; "Height =" 287 "Title =" image "style =" border: 0px; padding-top: 0px; padding-Right: 0px; padding-left: 0px; background-image: none; "alt =" image "src =" http://img1.51cto.com/attachment/201407/25/1056852_14062772815HKe.png "border =" 0 "/>

[Create a wildcard host]

What is a wildcard host? In fact, all the names to be parsed are resolved as an address. It can also be understood as the wildcard DNS host a record. The method is as follows:

1) Right-click the blank area of the DNS console and select "New Host", as shown in:

650) This. width = 650; "Height =" 381 "Title =" image "style =" border: 0px; padding-top: 0px; padding-Right: 0px; padding-left: 0px; background-image: none; "alt =" image "src =" http://img1.51cto.com/attachment/201407/25/1056852_1406277281AWGu.png "border =" 0 "/>

2) as shown in, enter "*" in the name and the server address used as the root DNS in the IP address.

650) This. width = 650; "Height =" 339 "Title =" image "style =" border: 0px; padding-top: 0px; padding-Right: 0px; padding-left: 0px; background-image: none; "alt =" image "src =" http://img1.51cto.com/attachment/201407/25/1056852_1406277281oW2u.png "border =" 0 "/>

[Test]
650) This. width = 650; "Height =" 487 "Title =" image "style =" border: 0px; padding-top: 0px; padding-Right: 0px; padding-left: 0px; background-image: none; "alt =" image "src =" http://img1.51cto.com/attachment/201407/25/1056852_1406277282JIQ2.png "border =" 0 "/>

Now, we have finished a simple simulation environment for DNS interception.

This article from the "stupid bird first fly" blog, please be sure to keep this source http://tingdongwang.blog.51cto.com/1056852/1530154