[B! DNS] michihideã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

michihide id:michihide

DNSã«é–¢ã™ã‚‹michihideã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (16)

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

${{author_name}}$
{{author_name}}{{created}}
{{ #comment }}{{ comment }}{{ /comment }}
- {{ label }}

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

ã‚ãƒ£ãƒƒã‚·ãƒ¥ãƒã‚¤ã‚ºãƒ‹ãƒ³ã‚°ã®é–‹ã„ãŸãƒ‘ãƒ³ãƒ‰ãƒ©ã®ç®±
ã‚ãƒ£ãƒƒã‚·ãƒ¥ãƒã‚¤ã‚ºãƒ‹ãƒ³ã‚°ã®é–‹ã„ãŸãƒ‘ãƒ³ãƒ‰ãƒ©ã®ç®± Opened Pandora's box of Cache Poisoning éˆ´æœ¨å¸¸å½¦ 2014.04.15 (Concept by å‰é‡Žå¹´ç´€ 2014.02) / English version èƒŒæ™¯ Kaminsky 2008å¹´ã€Dan Kaminsky æ°ãŒ TTL ã«å½±éŸ¿ã•ã‚Œãªã„æ¯’å…¥ã‚Œæ‰‹æ³•ã‚’ç™ºè¡¨ã—ãŸã€‚ ã—ã‹ã—ã€å½å¿œç”ã®Additional Section ã§æ¯’ãŒå…¥ã‚‹ã¨ã•ã‚ŒãŸã®ã¯èª¤ã‚Šã ã£ãŸã“ã¨ã‚’2011å¹´ã«éˆ´æœ¨ãŒæ˜Žã‹ã«ã—ãŸã€‚ http://www.e-ontap.com/dns/bindmatrix.html MÃ¼ller Bernhard MÃ¼ller ã® "IMPROVED DNS SPOOFING USING NODE RE-DELEGATION", 2008.7.14 https://www.sec-consult.c
michihide 2014/04/15
DNS

ã‚ãƒ£ãƒƒã‚·ãƒ¥

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

*ã‚ã¨ã§èªã‚€
ãƒªãƒ³ã‚¯
Google Public DNS Server Traffic Hijacked
The Internet is becoming a dangerous place day-by-day and especially for those innocent web users who rely on 3rd party services. The latest bad news is that the World's largest and most widely used Google's free public DNS (Domain name system) resolvers raised security red flags yesterday. DNS is the master address list for the Internet, which translates IP addresses into human readable form and
michihide 2014/03/18
DNS

Google

*ã‚ã¨ã§èªã‚€
ãƒªãƒ³ã‚¯
RHEL6/CentOS6ã§ã¯ã€single-request-reopen ã‚’å¿…é ˆã«ã—ãŸã„â€¦
2012-11-02 çµè«–ã‹ã‚‰è¨€ãˆã°ã€ã¨ã‚Šã‚ãˆãš RHLE6/CentOS6 ãªäººã¯ /etc/resolv.conf ã« options single-request-reopen ã‚’æ›¸ã„ã¦ãŠã“ã†ã¨ã„ã†è©±ã§ã™(å…¨éƒ¨å°æ–‡å—ã§ã™ã‚ˆã€å¿µã®ãŸã‚ï¼‰ ãªãœã‹ï¼Ÿ RHEL5/CentOS5/Ubuntu 10.04ãªLinuxã¨ã‹ã§ã¯ã€FQDN ã®è§£æ±ºã‚’ã™ã‚‹ã¨ãã« DNSã‚ãƒ£ãƒƒã‚·ãƒ¥ã‚µãƒ¼ãƒã« AAAA RR ã® Queryã‚’æŠ•ã’ã‚‹ AAAA RR ã® Reply ã‚’å—ã‘ã‚‹ DNSã‚ãƒ£ãƒƒã‚·ãƒ¥ã‚µãƒ¼ãƒã« A RR ã® Queryã‚’æŠ•ã’ã‚‹ A RR ã® Reply ã‚’å—ã‘ã‚‹ ã¨ã„ã†æŒ™å‹•ã§ã—ãŸãŒã€RHEL6/CentOS6 ã§ã¯ DNSã‚ãƒ£ãƒƒã‚·ãƒ¥ã‚µãƒ¼ãƒã« A RR ã® Queryã‚’æŠ•ã’ã‚‹ DNSã‚ãƒ£ãƒƒã‚·ãƒ¥ã‚µãƒ¼ãƒã« AAAA RR ã® Queryã‚’æŠ•ã’ã‚‹ A RR ã® Reply ã‚’å—ã‘ã‚‹ AAAA RR ã® Re
michihide 2013/11/07
ã‚½ãƒ¼ã‚¹ãƒãƒ¼ãƒˆã®ä½¿ã„å›žã—ã‚‚çŸ¥ã‚‰ãªã‹ã£ãŸã‘ã©ã€glibcä½¿ã‚ãªã„Linuxã®å‡¦ç†ç³»ãŒã‚ã‚‹ã®ã‚‚çŸ¥ã‚‰ãªã‹ã£ãŸã€‚ã©ã‚“ã ã‘æµ¦å³¶(>_<)

RHEL6

CentOS

DNS
ãƒªãƒ³ã‚¯
ã€Œæ˜”IIJã‚’ä½¿ã£ã¦ã„ãŸäººã€ã«ãŠé¡˜ã„ã§ã™ â€“ ã‚ªãƒ¼ãƒ—ãƒ³ãƒªã‚¾ãƒ«ãƒå¯¾ç–
2013å¹´12æœˆ2æ—¥12:00ã«å¤‰æ›´å®Ÿæ–½ã—ã¾ã™ å¯¾è±¡DNSã‚µãƒ¼ãƒã®IPã‚¢ãƒ‰ãƒ¬ã‚¹ 210.130.0.1 210.130.1.1 210.130.232.1 202.232.2.38 202.232.2.39 IIJmioã®ãŠã—ã‚‰ã› IIJ4Uã®ãŠã—ã‚‰ã› (202.232.2.38, 39ã¯æ³•äººå‘ã‘ã«æä¾›ã—ã¦ã„ã‚‹ã‚µãƒ¼ãƒã®ãŸã‚ã€mio/4Uã®ãŠçŸ¥ã‚‰ã›ã«å«ã¾ã‚Œã¦ã„ã¾ã›ã‚“ãŒã€åŒæ™‚ã«å®Ÿæ–½ã—ã¾ã™ã€‚) ä»Šå›žã®ã¦ãã‚ãã¯ã€çš†ã•ã‚“ã¸ã®ãŠé¡˜ã„ã®ãŸã‚ã«æ›¸ã„ã¦ã„ã¾ã™ã€‚ç‰¹ã«èªã‚“ã§é ‚ããŸã„ã®ã¯ã€Œä»¥å‰IIJã®ã‚µãƒ¼ãƒ“ã‚¹ã‚’ã”åˆ©ç”¨é ‚ã„ã¦ã„ãŸãŒã€ä½•ã‚‰ã‹ã®äº‹æƒ…ã§ä»Šã¯åˆ©ç”¨ã—ã¦ã„ãªã„æ–¹ã€ã§ã™ã€‚ ã¨ã€è¨€ã†ã®ã‚‚ã€ä»Šå›žãŠçŸ¥ã‚‰ã›ã™ã‚‹ä»¶ã¯ã€ã€Œç¾åœ¨ã‚‚IIJã‚’ã”åˆ©ç”¨é ‚ã„ã¦ã„ã‚‹æ–¹ã€ã«ã¯ã‚ã¾ã‚Šå½±éŸ¿ãŒãªãã€ã€Œä»Šã¯åˆ©ç”¨ã—ã¦ã„ãªã„æ–¹ã€ã®ä¸ã®ä¸€éƒ¨ã®æ–¹ã«å½±éŸ¿ãŒå‡ºã‚‹å¯èƒ½æ€§ãŒã‚ã‚‹ãŸã‚ã§ã™ã€‚ç¾åœ¨ã‚‚IIJã‚’ã”åˆ©ç”¨ä¸ã®ãŠå®¢æ§˜ã¸ã¯ã€ã‚µãƒãƒ¼ãƒˆã‚»ãƒ³ã‚¿ãƒ¼ã‚„æ‹…å½“å–¶æ¥ã‹ã‚‰ã”æ¡ˆå†…ã‚’å·®
michihide 2013/09/24
ã€ŽIIJãŒæ§‹ç¯‰ã€é‹ç”¨ã‚’æ‹…å½“ã—ãŸæ¡ˆä»¶ã«ã¤ã„ã¦ã€ä¸€éƒ¨ã“ã‚Œã‚‰ã®ãƒ‘ã‚¿ãƒ¼ãƒ³ã«è©²å½“ã™ã‚‹æ¡ˆä»¶ãŒã‚ã‚Šã¾ã™ã€‚ã€ã‚ã‹ã‚‹ãªãã€‚æ˜”ã¯è‰¯ã‹ã£ãŸ by ã‚ªãƒƒã‚µãƒ³

DNS

ã‚ªãƒ¼ãƒ—ãƒ³ãƒªã‚¾ãƒ«ãƒ
ãƒªãƒ³ã‚¯
ã¾ã£ã¡ã‚ƒï¼‘ï¼“ï¼™ Hiki - ç¬¬25å›žã¾ã£ã¡ã‚ƒï¼‘ï¼“ï¼™å‹‰å¼·ä¼š
ç¬¬25å›žã¾ã£ã¡ã‚ƒï¼‘ï¼“ï¼™å‹‰å¼·ä¼š ã¾ã£ã¡ã‚ƒï¼‘ï¼“ï¼™å‹‰å¼·ä¼šã¯å¦ç”Ÿã‚’æ”¯æ´ã—ã¦ã„ã¾ã™ã€‚{{br}}æ”¯æ´å†…å®¹ã¯ä»¥ä¸‹ã‚’å‚ç…§ãã ã•ã„ã€‚ ã¾ã£ã¡ã‚ƒï¼‘ï¼“ï¼™å‹‰å¼·ä¼šè£œåŠ©è¦å‰‡ ã‚¹ã‚±ã‚¸ãƒ¥ãƒ¼ãƒ« æ—¥æ™‚ 2012å¹´11æœˆ17æ—¥ï¼ˆåœŸæ›œæ—¥ï¼‰13æ™‚00åˆ†ã€œ17æ™‚30åˆ† å ´æ‰€ æ ªå¼ä¼šç¤¾ã‚µã‚¤ãƒãƒ¼ã‚¨ãƒ¼ã‚¸ã‚§ãƒ³ãƒˆ å¤§é˜ªæ”¯ç¤¾ä¼šè°å®¤ ãƒ†ãƒ¼ãƒž ç®¡ç†è€…ã®ãŸã‚ã®ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£å‹‰å¼·ä¼š å®šã€€å“¡ 70å è²»ã€€ç”¨ 1000å††ï¼ˆå¦ç”Ÿï¼šç„¡æ–™ï¼‰ å‚åŠ ç”³ã—è¾¼ã¿ å‚åŠ ç”³è¾¼ï¼šhttp://bit.ly/matcha139-25th-atnd{{br}}å‚åŠ ä¸€è¦§ï¼šhttp://bit.ly/matcha139-25th-list{{br}}â€» ç”³ã—è¾¼ã¿å†…å®¹ã«é–“é•ãˆãŒã‚ã‚‹å ´åˆã‚„ã€ã‚ãƒ£ãƒ³ã‚»ãƒ«ã«ã¤ã„ã¦ã¯ripjyr[atm@rk]gmail.comã¾ã§é€£çµ¡ä¸‹ã•ã„ã€‚â€» ãƒ—ãƒã‚°ãƒ©ãƒ æ™‚é–“ãƒ—ãƒã‚°ãƒ©ãƒ è³‡æ–™ 13æ™‚00åˆ†ã€œ13æ™‚10åˆ†é–‹ä¼šï¼‹æ¥å‹™é€£çµ¡ã€€ 13æ™‚10åˆ†ã€œ13æ™‚40åˆ†è‡ªå·±ç´¹ä»‹ã€€
michihide 2012/10/26
æµ¸é€ã„ã†ãªå…ˆç”Ÿã®ã‚»ãƒŸãƒŠãƒ¼ãŒã‚ã‚‹ã¿ãŸã„ã§ã€ãŸã¾ãŸã¾ãã®æ—¥åå¤å±‹æ–¹é¢ã®å‡ºå¼µã‹ã‚‰ã®å¸°ã‚Šé“ã ãƒ©ãƒƒã‚ãƒ¼ã¨ã‹æ€ã£ã¦ãŸã‚‰ã€å ´æ‰€ãŒå¤§é˜ªã§ã—ãŸorz

DNS

security
ãƒªãƒ³ã‚¯
(MCP70-642)2.4 DNSã®ç®¡ç†ã¨ç›£è¦– | old_3æµãƒ—ãƒã‚°ãƒ©ãƒžã®ãƒ¡ãƒ¢æ›¸ã
MCP70-642 Windows Server 2008 Network Infrastructure, Configuring ã®ãƒ¡ãƒ¢ã§ã™ã€‚ å‚è€ƒæ›¸ã¯ä¸‹è¨˜ã‚’ä½¿ç”¨ã€‚ â– 2.4.1 ã‚¨ãƒ¼ã‚¸ãƒ³ã‚°ã¨æ¸…æŽƒ DNSã‚µãƒ¼ãƒã®é‹ç”¨æ™‚ã«ç™ºç”Ÿã™ã‚‹å¯èƒ½æ€§ã®ã‚ã‚‹å•é¡Œã€‚ ãƒ»å¤ã„ã‚³ãƒ¼ãƒ‰ãŒã®ã“ã‚‹ ãƒ»DNSãƒ‡ãƒ¼ã‚¿ãƒ™ãƒ¼ã‚¹è‚¥å¤§åŒ– ãƒ»ã‚¾ãƒ¼ãƒ³è»¢é€é‡å¢—å¤§ ãƒ»å‹•çš„æ›´æ–°ã§ç™»éŒ²ã•ã‚ŒãŸãƒ¬ã‚³ãƒ¼ãƒ‰ãŒæ®‹ã‚‹ ã‚¨ãƒ¼ã‚¸ãƒ³ã‚° å¤ã„ãƒ¬ã‚³ãƒ¼ãƒ‰ã‚’å‰Šé™¤ã™ã‚‹ã‹ã©ã†ã‹ã®åˆ¤åˆ¥ã™ã‚‹å‡¦ç†ã€‚ æ¸…æŽƒ å®Ÿéš›ã«ãƒ¬ã‚³ãƒ¼ãƒ‰ã‚’å‰Šé™¤ã™ã‚‹å‡¦ç†ã€‚ éžæ›´æ–°é–“éš” DNSã‚µãƒ¼ãƒã¯ REFLESH (å†…å®¹å¤‰æ›´ã—ãªã„ã‚¿ã‚¤ãƒ ã‚¹ã‚¿ãƒ³ãƒ—ã®ã¿ã®æ›´æ–°) ã¯å—ã‘ä»˜ã‘ãšã€ UPDATE (å†…å®¹å¤‰æ›´ä¼´ã†æ›´æ–°) ã‚’å—ã‘ä»˜ã‘ã‚‹ã€‚ æ›´æ–°é–“éš” REFLES,UPDATE ã¨ã‚‚ã«å—ã‘ä»˜ã‘ã‚‹ã€‚ éžæ›´æ–°é–“éš”ã€æ›´æ–°é–“éš”ä¸(åˆã‚ã›ã¦ã‚¨ãƒ¼ã‚¸ãƒ³ã‚°æœŸé–“) ã«ä¸€åˆ‡ã®æ›´æ–°å‡¦ç†ãŒè¡Œã‚ã‚Œãªã„ã¨ã€æ¸…æŽƒã•ã‚Œã‚‹ã€‚ ãƒ¬ã‚³ãƒ¼ãƒ‰ã®ã‚¿ã‚¤ãƒ ã‚¹ã‚¿ãƒ³ãƒ—ã«åŸºã¥ã„ã¦
michihide 2012/06/07
Windows2008

DNS
ãƒªãƒ³ã‚¯
Hidden Open Resolver Tester
Hidden Open Resolver Tester Click for Test!
michihide 2012/05/25
DNS
ãƒªãƒ³ã‚¯
DNS è¨å®šã‚’æ›¸ãæ›ãˆã‚‹ãƒžãƒ«ã‚¦ã‚¨ã‚¢ (DNS Changer) æ„ŸæŸ“ã«é–¢ã™ã‚‹æ³¨æ„å–šèµ·
å„ä½ JPCERT-AT-2012-0008 JPCERT/CC 2012-03-06(åˆç‰ˆ) 2012-03-07(æ›´æ–°) <<< JPCERT/CC Alert 2012-03-06 >>> DNS è¨å®šã‚’æ›¸ãæ›ãˆã‚‹ãƒžãƒ«ã‚¦ã‚¨ã‚¢ (DNS Changer) æ„ŸæŸ“ã«é–¢ã™ã‚‹æ³¨æ„å–šèµ· https://www.jpcert.or.jp/at/2012/at120008.html I. æ¦‚è¦ JPCERT/CC ã§ã¯ã€DNS è¨å®šã‚’æ›¸ãæ›ãˆã‚‹ãƒžãƒ«ã‚¦ã‚¨ã‚¢(ä»¥ä¸‹ã€DNS Changer) ã« é–¢ã™ã‚‹æƒ…å ±ã‚’å…¥æ‰‹ã—ã¾ã—ãŸã€‚DNS Changer ã¯2007å¹´é ƒã«ã¯ã˜ã‚ã¦æ¤œå‡ºã•ã‚ŒãŸ ãƒžãƒ«ã‚¦ã‚¨ã‚¢ã§ã™ãŒã€DNS Changer ã«æ„ŸæŸ“ã—ãŸ PC ã¯ã€ç¾åœ¨ã§ã‚‚ä¸–ç•Œä¸ã§æ•°åä¸‡ å°ä»¥ä¸Šå˜åœ¨ã—ã€æ—¥æœ¬å›½å†…ã§ã‚‚ç›¸å½“æ•°ã® PC ãŒæ„ŸæŸ“ã—ã¦ã„ã‚‹ã¨ã®ã“ã¨ã§ã™ã€‚ ã¾ãŸã€2011å¹´11æœˆã«ç±³å›½é€£é‚¦æœæŸ»å±€ (FBI)ã«ã‚ˆã‚Šã€ä¸æ£ãª D
michihide 2012/03/07
é€£é‚¦è£åˆ¤æ‰€ãŒé–¢ä¸Žã€‚ã‚‚ã¯ã‚„ãªã‚“ã¨ã‚‚â€¦ã€‚

DNSChanger

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

DNS
ãƒªãƒ³ã‚¯
ãƒªãƒ“ã‚¢ã®ã‚¤ãƒ³ã‚¿ãƒ¼ãƒãƒƒãƒˆã¨bit.ly:Geekãªãºãƒ¼ã˜
Twitterãªã©ã‚’ä½¿ã£ã¦ã„ã‚‹ã¨bit.lyã¨ã„ã†URLçŸç¸®ã‚µãƒ¼ãƒ“ã‚¹ã‚’è‰¯ãè¦‹ã¾ã™ãŒã€ã€Œ.lyã€ã¨ã„ã†ccTLD(country code Top Level Domain)ã¯ãƒªãƒ“ã‚¢ã§ã™ã€‚ ç¾åœ¨ã€ãƒªãƒ“ã‚¢ãŒä¸å®‰å®šåŒ–ã—ã¦ã„ã¾ã™ãŒã€ã‚‚ã—ãƒªãƒ“ã‚¢ã®ccTLDãŒåœæ¢ã—ãŸå ´åˆã€bit.lyãŒå½±éŸ¿ã‚’å—ã‘ã‚‹å¯èƒ½æ€§ã‚‚ã‚ã‚Šãã†ã§ã™ã€‚ ã¾ãšã€æœ€åˆã«ã©ã®éƒ¨åˆ†ãŒã©ã†å½±éŸ¿ãŒã‚ã‚‹ã®ã‹ã‚’è¦‹ã¦ã¿ã¾ã™ã€‚ bit.lyãã®ã‚‚ã®ã¯ã‚¢ãƒ¡ãƒªã‚«ã«ã‚ã‚Šãã†ã§ã™ã€‚ DNSã¯Dny Inc.ã«ã‚ˆã‚‹Dynectã¨NTT Communicationsã®AS2914ã®IPã‚¢ãƒ‰ãƒ¬ã‚¹ã¨ã„ã†çµ„ã¿åˆã‚ã›ã§ã™ã€‚ ã“ã®çµ„ã¿åˆã‚ã›ã«ã‚ˆã‚‹é‹ç”¨(è² è·åˆ†æ•£)ã¯Twitterã¨åŒã˜ã§ã™ã€‚ > dig bit.ly. ; <<>> DiG 9.4.3-P2 <<>> bit.ly ;; global options: printcmd ;; Got answer: ;; -
michihide 2011/02/22
DNS

é‹ç”¨

urlçŸç¸®
ãƒªãƒ³ã‚¯
æµ¸é€ã„ã†ãª!
DNSã®å¼•è¶Šã—ã‚’ã—ãŸã‘ã©ã†ã¾ãåˆ‡ã‚Šæ›¿ã‚ã‚‰ãªã„ã€‚ãªã‹ãªã‹æµ¸é€ã—ãªã„ã€‚æ¥è€…ã«å•ã„åˆã‚ã›ã‚‹ã¨ã€ŒDNSã®æµ¸é€ã«ã¯æ•°æ—¥ã‹ã‹ã‚‹ã“ã¨ã‚‚ã‚ã‚Šã¾ã™ã€‚ãŠå¾…ã¡ãã ã•ã„ã€ã¨è¨€ã‚ã‚ŒãŸã€‚ã€€ã€ã€ã€ã¨ã„ã†è©±ã‚’ã‚ˆãèžãã¾ã™ãŒã€ã€Œæµ¸é€ã€(ä¼æ’ã€ä¼æ¬ã€æµ¸æ½¤ã€åæ˜ ãªã©ã¨ã‚‚å‘¼ã°ã‚Œã‚‹)ã£ã¦ãªã‚“ã§ã—ã‚‡ã†? DNSã®è¨å®šã‚’å¤‰æ›´ã™ã‚‹ã®ã¯ã€Œæµ¸é€ã€ã¨ã„ã†è¬Žã®ç¾è±¡ã«è¨—ã™ç¥žé ¼ã¿ã®ã‚ˆã†ãªä½œæ¥ãªã®ã§ã—ã‚‡ã†ã‹ã€‚ 2011.10.16 è¿½è¨˜:ã€Œæµ¸é€ã€ã¨è¨€ã£ã¦ã„ã‚‹ä¾‹ DNSã®ä»•çµ„ã¿ ã¾ãšã€DNSã®ä»•çµ„ã¿ã¨ã€ç‰¹ã«ã‚ãƒ£ãƒƒã‚·ãƒ¥ã®å‹•ä½œã«ã¤ã„ã¦è§£èª¬ã—ã¾ã™ã€‚...ã¨æ€ã„ã¾ã—ãŸãŒã€ã¨ã£ã¦ã‚‚å¤§å¤‰ãªã®ã§çœç•¥ã—ã¾ã™ã€‚ãŸã ã€æ¨©å¨ã‚µãƒ¼ãƒã«ç™»éŒ²ã•ã‚ŒãŸæƒ…å ±ãŒä¸–ç•Œä¸ã®ã‚ãƒ£ãƒƒã‚·ãƒ¥ã‚µãƒ¼ãƒã«é…ä¿¡ã•ã‚Œã‚‹ãªã©ã¨ã„ã†ä»•çµ„ã¿ã¯ DNS ã«ã¯å˜åœ¨ã—ã¾ã›ã‚“ã€‚æµ¸é€ã¨ã„ã†äººã¯ãã†æ€ã£ã¦ã„ã‚‹ã‚ˆã†ã§ã™ãŒã€‚(ã“ã‚“ãªãµã†ã«) ã€Œæµ¸é€ã€ã¨ã„ã†è¨€è‘‰ã§é¨™ã•ã‚Œã¦ã„ã¾ã›ã‚“ã‹? äº‹å‰ã«å¤‰æ›´ã—ãŸã„DNSã®ãƒ¬ã‚³ãƒ¼ãƒ‰ã®TTLã‚’çŸãã—
michihide 2011/02/03
æµ¸é€

DNS

ãƒãƒƒãƒˆãƒ¯ãƒ¼ã‚¯
ãƒªãƒ³ã‚¯
ç·¨é›†å¾Œè¨˜(2009-06-14)
â˜… ã“ã®å›½ã«ã¨ã£ã¦ã¯ãƒ»ãƒ»ãƒ»ãƒ» æ ¸å…µå™¨ã¨è¨€ã†ã¨ã€æ™®é€šã€ç§‘å¦æŠ€è¡“ã®è² ã®å´é¢ã®æœ€ãŸã‚‹ã‚‚ã®ã¨ã—ã¦å—ã‘æ¢ã‚ã‚‰ã‚Œã¦ã„ã‚‹ã¨æ€ã„ã¾ã™ãŒã€ãŸã¶ã‚“ã“ã¡ã‚‰ã®å›½ã®äººã€…ã«ã¨ã£ã¦ã¯ã€ã¾ã£ãŸãé€†ã§ã—ã‚‡ã†ãã€‚ asahi.comï¼ˆæœæ—¥æ–°èžç¤¾ï¼‰ï¼šåŒ—æœé®®ã€ã‚¦ãƒ©ãƒ³æ¿ƒç¸®ã‚’å…¬å¼è¡¨æ˜Žã€€å®‰ä¿ç†æ±ºè°ã«åç™º - å›½éš› â˜… DNSã¯ã‚„ã£ã±ã‚Šé›£ã—ã„ã‚‰ã—ã„ ç§ã ã£ã¦å®Œç’§ã¨ã„ã†è¨³ã§ã¯ã‚ã‚Šã¾ã›ã‚“ãŒã€ã“ã‚Œã¯è¨€ã£ã¦ãŠã‹ãªã„ã¨ãƒ»ãƒ»ãƒ»ã¨ã„ã†æ°—æŒã¡ãŒã„ã„åŠ æ¸›æºœã¾ã£ã¦ããŸã®ã§ã€‚ è¿½åŠ ãƒ»å¤‰æ›´ã—ãŸãƒ‰ãƒ¡ã‚¤ãƒ³ã®æƒ…å ±ãŒä¸–ç•Œä¸ã®ãƒãƒ¼ãƒ ã‚µãƒ¼ãƒã«æµ¸é€ã™ã‚‹ã€è¡Œãæ¸¡ã‚‹ã€ä¼æ’ã—ã¦ã„ãã€ãªã‚“ã¦äº‹ã¯ã‚ã‚Šã¾ã›ã‚“ã€‚ ã€Œç™»éŒ²ãƒ»å¤‰æ›´ã—ãŸæƒ…å ±ã¯ä¸–ç•Œä¸ã®ãƒãƒ¼ãƒ ã‚µãƒ¼ãƒã«è¡Œãã‚ãŸã‚‹ã€ã¨çœŸé¢ç›®ã«ä¿¡ã˜ã¦ã„ã‚‹æŠ€è¡“è€…ã¯ã€ãã‚ŒãŒã©ã‚Œãã‚‰ã„éžç¾å®Ÿçš„ãªäº‹ã‹è€ƒãˆã¦ã¿ãŸã‚‰ã„ã„ã€‚é»Žæ˜ŽæœŸã® HOSTS.TXT ã®ç™ºæƒ³ã ã‚ˆã€ãã‚Œã€‚ ä¸€ä½“ã€å…¨ä¸–ç•Œã«ã„ãã¤ã®ã‚¾ãƒ¼ãƒ³ãƒ‡ãƒ¼ã‚¿ãŒå˜åœ¨ã—ã€åˆè¨ˆã§ã„ãã¤ã®Aãƒ¬ã‚³ãƒ¼ãƒ‰ã‚„PTRãƒ¬ã‚³ãƒ¼ãƒ‰ãªã©ãŒå˜åœ¨
michihide 2011/01/27
DNS

æµ¸é€

ä¼æ¬
ãƒªãƒ³ã‚¯
What Is DNS Propagation Process | Official Web Hosting Blog by eUKhost Ltd.
What Is DNS Propagation Process And Why It Takes So Long To Initially See My Website Live? You may wonder why your new website is taking more than 72 hours and not immediately to be seen â€œliveâ€ and â€œin stable formâ€ on the internet. May be, sometimes, a little less than 72 hours! Definitely, the website does not immediately become â€œliveâ€ on the internet even after you have purchased the domain name
michihide 2011/01/19
DNS

ä¼æ¬

é…å»¶

*ã‚ã¨ã§èªã‚€
ãƒªãƒ³ã‚¯
ï¼ ITï¼šDNS Tipsï¼šã‚°ãƒ«ãƒ¼ãƒ¬ã‚³ãƒ¼ãƒ‰ã§ä»˜åŠ ã™ã‚‹æƒ…å ±ã¨ã¯
ã‚°ãƒ«ãƒ¼ãƒ¬ã‚³ãƒ¼ãƒ‰ã¨ã¯ã€ã‚³ãƒ³ãƒ†ãƒ³ãƒ„ã‚µãƒ¼ãƒãŒã€å§”ä»»ã•ã‚ŒãŸã‚µãƒ–ãƒ‰ãƒ¡ã‚¤ãƒ³ã®NSã‚’è¿”ã™éš›ã«ã€è¿½åŠ ã®æƒ…å ±ã¨ã—ã¦å¿…è¦ã¨ãªã‚‹æƒ…å ±ã®ã“ã¨ã§ã™ã€‚å…·ä½“çš„ã«ã¯ã€ãƒãƒ¼ãƒ ã‚µãƒ¼ãƒã®åå‰ã«å¯¾å¿œã™ã‚‹IPã‚¢ãƒ‰ãƒ¬ã‚¹ã®æƒ…å ±ã«ãªã‚Šã¾ã™ã€‚ ã‚µãƒ–ãƒ‰ãƒ¡ã‚¤ãƒ³ã®å§”ä»»ã‚’ã—ã¦ã„ã‚‹å ´åˆã€ä¸Šä½ã®ã‚³ãƒ³ãƒ†ãƒ³ãƒ„ã‚µãƒ¼ãƒã«å§”ä»»å…ˆã®ãƒ‰ãƒ¡ã‚¤ãƒ³åã®å•ã„åˆã‚ã›ãŒã‚ã‚‹ã¨ã€å§”ä»»å…ˆã‚’ç®¡ç†ã™ã‚‹ãƒãƒ¼ãƒ ã‚µãƒ¼ãƒã®åå‰ã‚’è¿”ã—ã¾ã™ã€‚ã—ã‹ã—ã€ãƒãƒ¼ãƒ ã‚µãƒ¼ãƒã¨ã®é€šä¿¡ã‚’è¡Œã†ãŸã‚ã«ã¯ã€åå‰ã§ã¯ãªãIPã‚¢ãƒ‰ãƒ¬ã‚¹ã‚’çŸ¥ã‚‹å¿…è¦ãŒã‚ã‚Šã¾ã™ã€‚ã¤ã¾ã‚Šã€æ•™ãˆã¦ã‚‚ã‚‰ã£ãŸãƒãƒ¼ãƒ ã‚µãƒ¼ãƒã®åå‰ã‚’å†åº¦DNSã§èª¿ã¹ã‚‹ã“ã¨ã«ãªã‚Šã¾ã™ã€‚ã‚‚ã—ã“ã“ã§ã€è¿”ã£ã¦ããŸãƒãƒ¼ãƒ ã‚µãƒ¼ãƒã®åå‰ãŒå§”ä»»å…ˆã®ãƒ‰ãƒ¡ã‚¤ãƒ³åã§ã‚ã£ãŸå ´åˆã€ã“ã®çŠ¶æ³ãŒãƒ«ãƒ¼ãƒ—ã‚’èµ·ã“ã—ã€ã©ã†ã‚„ã£ã¦ã‚‚å§”ä»»å…ˆã®ãƒ‰ãƒ¡ã‚¤ãƒ³ã®æƒ…å ±ã‚’å¾—ã‚‹ã“ã¨ãŒã§ããªããªã£ã¦ã—ã¾ã„ã¾ã™ã€‚ ã“ã‚Œã‚’é˜²ãŽã€ä¸Šä½ã®ã‚¾ãƒ¼ãƒ³ã¨ä¸‹ä½ã®æƒ…å ±ã‚’ã¤ãªãŽæ¢ã‚ã‚‹ãŸã‚ã«ä½¿ã‚ã‚Œã‚‹ã®ãŒã‚°ãƒ«ãƒ¼ï¼ˆglueã€æŽ¥ç€å‰¤ï¼‰ãƒ¬ã‚³ãƒ¼ãƒ‰ã§ã™ã€‚ ä¾‹ãˆã°ã€ex
michihide 2011/01/18
DNS

glueãƒ¬ã‚³ãƒ¼ãƒ‰

bind
ãƒªãƒ³ã‚¯
gmailã®SMTPã‚’ä½¿ã£ã¦ç‹¬è‡ªãƒ‰ãƒ¡ã‚¤ãƒ³ãƒ¡ãƒ¼ãƒ«ã‚’é€ä¿¡ã™ã‚‹éš›ã®spfè¨å®š â€“ spacewalker
ã‚¿ã‚¤ãƒˆãƒ«ã®é€šã‚Šã€ä¸€èˆ¬ã®æ–¹ã«ã¯å…¨ãä¸è¦ãªæƒ…å ±ãªã®ã§èªã¿é€²ã‚ã¦ã„ãŸã ãå¿…è¦ã¯ã”ã–ã„ã¾ã›ã‚“ã€‚ å¤§ã—ãŸæƒ…å ±ã§ã¯ã‚ã‚Šã¾ã›ã‚“ãŒã€å‚™å¿˜éŒ²ã‚‚ã‹ãã¦æ›¸ã„ã¦ãŠãã¾ã™ã€‚ ç‹¬è‡ªãƒ‰ãƒ¡ã‚¤ãƒ³ã‚’å–å¾—ã—ãƒ¡ãƒ¼ãƒ«ã‚µãƒ¼ãƒã‚’æ§‹ç¯‰ãƒ»ç®¡ç†ã—ã¦ã„ã‚‹æ–¹ã¯ã€æœ€è¿‘ã®spamãƒ¡ãƒ¼ãƒ«å¯¾ç–ã«è‹¦åŠ´ã•ã‚Œã¦ã„ã‚‹ã“ã¨ã¨æ€ã„ã¾ã™ã€‚ã‹ãè¨€ã†ç§ã‚‚ã€linuxãƒ™ãƒ¼ã‚¹ã§ãƒ¡ãƒ¼ãƒ«ã‚µãƒ¼ãƒã‚’æ§‹ç¯‰ã—å¤šãã®ãƒ‰ãƒ¡ã‚¤ãƒ³ã®ãƒ¡ãƒ¼ãƒ«ã‚’ç®¡ç†ã—ã¦ãŠã‚Šã¾ã™ãŒã€spamãƒ¡ãƒ¼ãƒ«å¯¾ç–ã‚’è¬›ã˜ã‚‹ã®ãŒé¢å€’å¤§å¤‰ã«ãªã£ã¦ãã¾ã—ãŸã€‚å¤šé‡ãªspamã‚’æ¤œå‡ºã™ã‚‹æ©Ÿèƒ½ã®å®Ÿè£…ã‚‚ã‚‚ã¡ã‚ã‚“å¤§å¤‰ã§ã™ãŒã€ã“ã®æœ€è¿‘å•é¡Œãªã®ã¯ã€gmail, yahooãƒ¡ãƒ¼ãƒ«, hotmailãªã©ã®å¤§æ‰‹ãŒé‹ç”¨ã™ã‚‹ãƒ•ãƒªãƒ¼ãƒ¡ãƒ¼ãƒ«ãŒspamå¯¾ç–ã‚’å …å›ºã«å®Ÿè£…ã—ã€ç‹¬è‡ªã§æ§‹ç¯‰ã—ãŸãƒ¡ãƒ¼ãƒ«ã‚µãƒ¼ãƒã‹ã‚‰ã®ãƒ¡ãƒ¼ãƒ«ã¯ã—ã‚Œã£ã¨spamã¨åˆ¤å®šã—ã¦ã—ã¾ã†ã“ã¨ã§ã™ã€‚spamhouseãªã©ã®ã‚ˆã†ã«ãƒ¡ãƒ¼ãƒ«ã‚µãƒ¼ãƒã®ãƒ–ãƒ©ãƒƒã‚¯ãƒªã‚¹ãƒˆåŒ–ã‚‚ã•ã‚Œã¦ãŠã‚Šã¾ã™ãŒã€æ„å›³ã—ãªã„ã¨ã“ã‚ã§è‡ªåˆ†ã®ã‚µãƒ¼ãƒãƒ¼ãŒãƒªã‚¹
michihide 2010/07/30
GMail

SPF

DNS
ãƒªãƒ³ã‚¯
IPv6å¯¾å¿œDNSã‚µãƒ¼ãƒã®å®Ÿç¾
å‰å›žã¾ã§ã«ç´¹ä»‹ã—ãŸDynamic DNSã‚„TSIGãªã©ã§BIND 9ã®å…ˆé€²æ€§ã®ä¸€ç«¯ã‚’ã†ã‹ãŒã†ã“ã¨ãŒã§ãã¾ã™ãŒã€BIND 9ã«ã¯ã•ã‚‰ã«é…åŠ›çš„ãªæ©Ÿèƒ½ãŒç››ã‚Šè¾¼ã¾ã‚Œã¦ã„ã¾ã™ã€‚ä»Šå›žã¯ã€IPv6æ©Ÿèƒ½ã‚’ç´¹ä»‹ã—ã¾ã™ã€‚ IPv6ã®åŸºæœ¬ IPv6ã«ã¤ã„ã¦ã€ã„ã¾ã•ã‚‰è£œè¶³ã™ã‚‹å¿…è¦ã¯ãªã„ã§ã—ã‚‡ã†ã€‚ï¼ ITã§ã‚‚ã€ä»¥ä¸‹ã®è¨˜äº‹ã§Linuxã§IPv6ç’°å¢ƒã‚’æ§‹ç¯‰ã™ã‚‹æ–¹æ³•ãŒç´¹ä»‹ã•ã‚Œã¦ã„ã¾ã™ã€‚ DNSã‚µãƒ¼ãƒè‡ªä½“ã‚’IPv6ç’°å¢ƒã«ç§»è¡Œã™ã‚‹æ–¹æ³•ã«ã¤ã„ã¦ã¯ã€ä¸Šè¨˜ã®è¨˜äº‹ã‚’å‚ç…§ã—ã¦ãã ã•ã„ã€‚æœ¬è¨˜äº‹ã§ã¯ã€IPv6ã‚¢ãƒ‰ãƒ¬ã‚¹ãŒå¼•ã‘ã‚‹ã“ã¨ã‚’å‰æã¨ã—ã¾ã™ã€‚ã‚µãƒ¼ãƒãŒIPv4ï¼v6ã©ã¡ã‚‰ã®ç’°å¢ƒã«ã‚ã‚‹ã‹ã¯å•é¡Œã«ã—ã¾ã›ã‚“ã€‚ ã§ã¯ã€ã„ãã¤ã‹ã®ã‚ãƒ¼ãƒ¯ãƒ¼ãƒ‰ã‚’äºˆå‚™çŸ¥è˜ã¨ã—ã¦ã¾ã¨ã‚ã¦ãŠãã¾ã™ã€‚ IPv6ã‚¢ãƒ‰ãƒ¬ã‚¹ 128bitã®ã‚¢ãƒ‰ãƒ¬ã‚¹ç©ºé–“ã‚’ä½¿ç”¨ã™ã‚‹ã“ã¨ãŒå¯èƒ½ã§ã€2ã®128ä¹—å€‹ã®ã‚¢ãƒ‰ãƒ¬ã‚¹ã‚’ç”Ÿæˆã§ãã¾ã™ã€‚IPv4ã¨åŒæ§˜ã€äºˆç´„ã•ã‚Œã¦ã„ã‚‹ã‚¢ãƒ‰ãƒ¬ã‚¹ã‚‚ã‚ã‚‹ãŸã‚ã€ã™ã¹ã¦ãŒä½¿ç”¨ã§ãã‚‹ã‚
michihide 2010/02/09
ipv6

bind

DNS
ãƒªãƒ³ã‚¯
æ¬¡ä¸–ä»£ã®ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£æ‹¡å¼µDNSSECã‚’BIND 9ã§å®Ÿç¾
æ¬¡ä¸–ä»£ã®ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£æ‹¡å¼µDNSSECã‚’BIND 9ã§å®Ÿç¾ï¼šå®Ÿç”¨ BIND 9ã§ä½œã‚‹DNSã‚µãƒ¼ãƒï¼ˆ13ï¼‰ï¼ˆ1/3 ãƒšãƒ¼ã‚¸ï¼‰ ç¾åœ¨ã€æ¨™æº–åŒ–ä½œæ¥ãŒé€²è¡Œä¸ã®DNSSECã€‚ãã®ä»•çµ„ã¿ã¨BIND 9ã§ã®å®Ÿç¾æ–¹æ³•ã‚’è§£èª¬ã™ã‚‹ã€‚å¾ŒåŠã§ã¯ã€ã‚¹ãƒ—ãƒªãƒƒãƒˆDNSã®è¨å®šæ–¹æ³•ã‚’ç´¹ä»‹ã€‚ï¼ˆç·¨é›†å±€ï¼‰ ä»Šå›žã¯ã€DNSã®ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£æ‹¡å¼µã§ã‚ã‚‹ã€ŒDNSSECã€ã¨ã‚¹ãƒ—ãƒªãƒƒãƒˆDNSã‚’å®Ÿç¾ã™ã‚‹ã€ŒVIEWã€ã«ã¤ã„ã¦è§£èª¬ã—ã¾ã™ã€‚DNSSECã¯ã€ã¾ã æ¨™æº–åŒ–ã®è°è«–ãŒæ´»ç™ºã«è¡Œã‚ã‚Œã¦ã„ã‚‹æœ€ä¸ã§ã™ã€‚ãã®ãŸã‚BIND 9ã§ã¯å®Ÿè£…ãŒä¸å®Œå…¨ãªã‚‚ã®ã‚‚ã‚ã‚Šã¾ã™ã€‚ ã‚¾ãƒ¼ãƒ³æƒ…å ±ã®ä¿¡é ¼æ€§ã‚’ä¿è¨¼ã™ã‚‹DNSSEC ç¬¬9å›žã§ã€ã‚¾ãƒ¼ãƒ³æƒ…å ±ãŒæ”¹ã–ã‚“ã•ã‚Œã‚‹å±é™ºã‚’å›žé¿ã™ã‚‹æ‰‹æ®µã¨ã—ã¦DNSSECï¼ˆDNS Security Extensionï¼šDNS ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£æ‹¡å¼µï¼‰ã‚’ç´¹ä»‹ã—ã¾ã—ãŸã€‚ç¾åœ¨ã€DNSSECã¯IETFã®DNSEXTï¼ˆDNS Extensionsï¼‰ãƒ¯ãƒ¼ã‚ãƒ³ã‚°ã‚°ãƒ«ãƒ¼ãƒ—ã§æ¨™æº–åŒ–ã®
michihide 2010/02/09
DNS

DNSSEC
ãƒªãƒ³ã‚¯
1