DNS » Historique » Version 8
Laurent GUERBY, 01/04/2012 10:41
| 1 | 1 | Laurent GUERBY | h1. DNS |
|---|---|---|---|
| 2 | 1 | Laurent GUERBY | |
| 3 | 1 | Laurent GUERBY | Voir aussi [[DNSSEC]] |
| 4 | 1 | Laurent GUERBY | |
| 5 | 3 | Laurent GUERBY | * Alternatives a bind9 ? |
| 6 | 3 | Laurent GUERBY | * Comment migrer ces zones ? |
| 7 | 3 | Laurent GUERBY | * Peut-on utiliser plusieurs implémentations DNS de manière synchronisée en même temps ? |
| 8 | 3 | Laurent GUERBY | * Comment faire de l'anycast ? |
| 9 | 3 | Laurent GUERBY | * Partager ces services avec d'autres structures ? |
| 10 | 4 | Laurent GUERBY | |
| 11 | 4 | Laurent GUERBY | h2. Astuces |
| 12 | 4 | Laurent GUERBY | |
| 13 | 4 | Laurent GUERBY | sileht: dig sur bind permets de recuperer le vrai hostname de la machine interrogée : |
| 14 | 4 | Laurent GUERBY | dig @sileht.net hostname.bind txt ch |
| 15 | 4 | Laurent GUERBY | pour detecter DNS load balancé: for j in $(seq 0 20) ; do dig @a.dns.gandi.net hostname.bind txt ch +short ; done |
| 16 | 5 | Laurent GUERBY | |
| 17 | 7 | Laurent GUERBY | https://lists.dns-oarc.net/pipermail/dns-operations/2011-December/007857.html |
| 18 | 7 | Laurent GUERBY | <pre> |
| 19 | 7 | Laurent GUERBY | FYI: here's a pcap filter that will match only UDP DNS ANY queries: |
| 20 | 7 | Laurent GUERBY | |
| 21 | 7 | Laurent GUERBY | udp and dst port 53 and udp[10]&0xf8=0 and udp[12:4]=65536 and udp[16:4]=0 and udp[udp[4:2]-3]=255 |
| 22 | 7 | Laurent GUERBY | |
| 23 | 7 | Laurent GUERBY | It only works for IPv4 (that's a pcap limitation). |
| 24 | 7 | Laurent GUERBY | </pre> |
| 25 | 7 | Laurent GUERBY | |
| 26 | 5 | Laurent GUERBY | h2. Misc |
| 27 | 5 | Laurent GUERBY | |
| 28 | 5 | Laurent GUERBY | |
| 29 | 5 | Laurent GUERBY | * root zone http://www.internic.net/zones/named.root |
| 30 | 6 | Laurent GUERBY | * dig @dns.example.com example.com -t AXFR |
| 31 | 8 | Laurent GUERBY | * https://www.dns-oarc.net/wiki/mitigating-dns-denial-of-service-attacks |
| 32 | 8 | Laurent GUERBY | * |