How to Get Out on a Manipulated DNS Server?

Asked By Adan Sims 10 points N/A Posted on - 03/12/2012

I have a wordpress blog. When I log in, the URL doesn't show me www. I log into a manipulated DNS server request. How can I come out of this? Please, urgent help needed.

• Status: Open
• Question Views: 941
• Answer Count: 1
• Vote Up 0 Vote Down

• Answer Accepted: No
• Question Category: Misc Security

Answered By Oleksii bagsic 0 points N/A #195210

How to Get Out on a Manipulated DNS Server?

 

Take note of the important DNS security practices are:

 

• You should provide a separate view of your DNS towards your internal and external users or customers if your Organization has an intranet.

• You must prevent zone transfers

• You must limit as to who can create queries

• You must harden the Operating System on which DNS server resides to the level of bastion host

• You must use internal firewall to block all unused ports in order to prevent exploitation of remote vulnerabilities (e.g. RPC vulnerabilities, although mostly RPC services are not running on DNS server).

You need to divide DNS servers into internal and external in a Firewall environment. The most common DNS checks can be done using the command ""dig"" (Domain Information Groper). For example, the command:

dig -t txt -c chaos [email protected]

This will query for the BIND Version running on your DNS name server. You will be able block this capability using in named.conf:

options {

    …

    version ""0.1"";

};

 

However, there are many subtle things that you may not grasp in manual checks, so using hardening tools are important. They will not guarantee anything as your understanding of the DNS infrastructure can be matched by the tools but they can help you determine some blunders and inconsistencies.

 

Complete all of these.

 

I hope your problem will be solved.  

About Oleksii bagsic

Questions
0

Answers
27

Best Answers
3

• Vote Up 0 Vote Down

• Posted on - 03/13/2012
• Question Category: Misc Security