Investigate how CVE-2015-5477 CloudFlare Virtual DNS protects its users
Last week, ISC released a patch to fix a remote vulnerability in the BIND9 DNS server. This vulnerability causes the server to crash when processing a certain data packet.The announcement indicates that an error occurs when the server processes a TKEY-type query. This error causes assertion
The installation of DNS servers and clients is briefly described in the previous section. Although there are few knowledge points involved, there are already two parts of the DNS system that are indispensable, that is, DNS servers and clients, and the DNS system includes zone and resource records, which are primarily d
Let's say your server IP is 211.147.9.106
1 First, you should know which DNS server is responsible for this IP's reverse domain name resolution. You can use this page to query reverse domain name resolution information http://www.dnsstuff.com/tools/ptr.ch?ip=211.147.9.106
Look at the last paragraph.
Details:
ns.cnc.ac.cn. (a authoritative nameserver for 147.2
, the location of the root is clearly indicated. There are 13 root servers in the world.
There are two search methods: recursive and iterative, and DNS search is recursive + iterative. Therefore, the local DNS server must be recursive to the local host, otherwise, the client cannot know the DNS resolved address. When the DNS
.mageedu.com. Admin. Mageedu.com. (201509241H5MThe6H)Mageedu.com. In NS ns1.mageedu.com.Mageedu.com. In MX ten mail.mageedu.com.NS1 in A 192.168.9.250Mail in A 192.168.9.251WWW in A 192.168.9.252WWW in A 192.168.9.253FTP in CNAME WWWSave Chown root:named Mageedu.com.zone; chmod 640 Mageedu.com.zonevim/etc/resolv.conf Edit Search Localdomain nameserver 192.168.9.247Start Services: Service named restartDig-t A www.mageedu.comDig-x IP: Check hostname according to IPHOST-T RT Name: Parse result of q
器存放文件/var/named/named.empty/var/named/named.localhost/var/named/named.loopbackZone Resolution library file:/var/named/zone_name.zoneDig,host,nslookup is the DNS test toolHere we have four experiments to explain the DNS configuration of four differentConfiguring BIND for forward parsingConfiguring a reverse-resolved bindConfigure secondary BindImplementing zone tr
Lab questions:
1. Forward/reverse DNS resolution
2. Master-slave DNS Synchronization
Lab environment:
1. vmwarevm
2. More than two Linux sub-Machines
3. XP Testing Machine
Experiment process:
1. forward and reverse DNS resolution
Tutorial topology:
650) This. width = 650;
Tags: cache tin image TAB manage exp Res try LookupDns_bind_ forward and reverse domain name resolutionBind Service supports TSIG Secure encryption transfer mechanismDNS domain name resolution service for resolving domain name and IP address correspondence Serviceforward parsing: Based on the domain name lookup corresponding IP AddressReverse parsing: based on IP address lookup for the corresponding domain nameDNS structure Model:however, depending on
reverse Domain name resolution, in contrast to the usual forward domain resolution, provides IP address to the corresponding domain name. IP Reverse resolution is primarily applied to mail servers to block spam, especially in foreign countries. most spammers use dynamically assigned or unregistered domain names. IP address to send spam to evade tracking, using the domain name
After the MySQL database receives a network connection, it first obtains the IP address of the other party, and then performs reverse DNS resolution on the IP address to obtain the host name corresponding to the IP address. Use the host name in the permission system for permission determination. Reverse DNS resolution
In the day-to-day IT operations, we often need to query the IP address of the corresponding host name, as well as anti-spam often use the Reverse address query function. DNS itself can also be used to complete the reverse resolution of the address settings, the type of reverse query we call it a PTR record (the
correspond to multiple IP addresses, but at the same time, a domain name can only have an IP address, an IP address can correspond to multiple domain names.
3. Query DNS
Python can implement forward and reverse queries for DNS. The following is the code for the forward query:
Copy Code code as follows:
#!/usr/bin/env python
Import Sys,socket
MySQL database received a network connection, first get the IP address of the other side, and then the IP address for the reverse DNS resolution to get this IP address corresponding host name. Use the host name in the permission system to determine the permissions. Reverse DNS parsing is time-consuming and can make use
Experimental Requirements: Establish DNS the principal and subordinate domain name server implements forward reverse queryExperimental steps:1. forward QueryMount and install first Bind Software650) this.width=650; "title=" 1.png "src=" Http://s3.51cto.com/wyfs02/M01/5A/33/wKioL1T5omLwr-5cAAMnrki4uE4271.jpg " alt= "Wkiol1t5omlwr-5caamnrki4ue4271.jpg"/>View working directory650) this.width=650; "title=" 2.p
First, reverse zone: The domain name is resolved to IP====================================================================================Note Close Iptables,selinuxOne, DNS server R reverse resolution required environment1. Three machines are needed.
First: 192.168.137.140 do DNS server needs to install bind
By default, mysql will automatically reverse parse. If we cannot handle the problem, we will find a large number of unauthenticated user prompts when viewing show processlist, the following describes how to solve unauthenticated user.
Example
The Code is as follows:
Copy code
Mysql> show processlist;| 20681949 | unauthenticated user | A. B .C.D: 52497 | NULL | Connect | Reading from net | NULL || 20681948 | unauthenticated user
Dual-nic computer linux operating system multiple services reverse DNS resolution problem solution overview-Linux Enterprise Application-Linux server application information, the following is a detailed reading. Many Computers are installed with dual NICs. When connecting to the Intranet, many services may encounter connection timeout. The most likely reason is that these services are applied to
The following is reverse resolution based on RedHat5 or CentOS system (IP192.168.1.2 domain name is www.linuxidc.com). to ensure successful construction, please do not miss any steps. The following is a detailed step-by-step command can also ensure success! If you have completed a forward resolution (for details, refer to the previous article) and passed the test, the class will go through reverse resolutio
The content source of this page is from Internet, which doesn't represent Alibaba Cloud's opinion;
products and services mentioned on that page don't have any relationship with Alibaba Cloud. If the
content of the page makes you feel confusing, please write us an email, we will handle the problem
within 5 days after receiving your email.
If you find any instances of plagiarism from the community, please send an email to:
info-contact@alibabacloud.com
and provide relevant evidence. A staff member will contact you within 5 working days.