[B! dns] limitususã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

limitusus id:limitusus

dnsã«é–¢ã™ã‚‹limitususã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (8)

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

${{author_name}}$
{{author_name}}{{created}}
{{ #comment }}{{ comment }}{{ /comment }}
- {{ label }}

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

Chrome ã® DNSã‚ãƒ£ãƒƒã‚·ãƒ¥ã‚’æ¶ˆã™æ–¹æ³•
ã“ã‚“ã«ã¡ã¯ã€æ¾ç”°ã§ã™ã€‚ ä»Šå›žã¯Google Chrome ã§ã®DNSã‚ãƒ£ãƒƒã‚·ãƒ¥ã®æ¶ˆã—æ–¹ã§ã™ã€‚ æœ€è¿‘ï¼ˆï¼Ÿï¼‰ã®ãƒ–ãƒ©ã‚¦ã‚¶ã¯èªã¿è¾¼ã¿ã‚’é€Ÿãã™ã‚‹ãŸã‚ã«è‰²ã€…ãªæŠ€ã‚’ä½¿ã£ã¦ã„ã‚‹ã‚ˆã†ã§ã€ä¾‹ãˆã°ãƒ–ãƒ©ã‚¦ã‚¶ãŒDNSã®ã‚ãƒ£ãƒƒã‚·ãƒ¥ã‚’æŒã£ã¦ã„ã¦ã€ã„ã¡ã„ã¡ãƒžã‚·ãƒ³ã®DNSã‚ãƒ£ãƒƒã‚·ãƒ¥ã‚’å‚ç…§ã—ãªã„ã§ã‚‚ã„ã„ã‚ˆã†ã«ã—ã¦ã„ã‚‹ã¿ãŸã„ã§ã™ã€‚ ãŸã ã—ã“ã®å½±éŸ¿ã§ãƒžã‚·ãƒ³ä¸Šã§DNSã‚ãƒ£ãƒƒã‚·ãƒ¥ã‚’æ¶ˆã—ãŸã¨ã—ã¦ã‚‚ãƒ–ãƒ©ã‚¦ã‚¶ã«ã¯æ®‹ã£ã¦ã„ã¦ç§»è»¢æ™‚ãªã©ã€ãªã‹ãªã‹ç§»è»¢å…ˆã®ãƒšãƒ¼ã‚¸ãŒè¦‹ã‚Œãªã„ãªã‚“ã¦ã“ã¨ãŒã‚ã‚Šã¾ã™ã€‚ ãã“ã§ãƒ–ãƒ©ã‚¦ã‚¶ã®DNSã‚ãƒ£ãƒƒã‚·ãƒ¥ã‚’æ¶ˆã—ã¦ã—ã¾ã†æ–¹æ³•ã§ã™ã€‚Chromeã§ã®ã‚„ã‚Šã‹ãŸã«ãªã‚Šã¾ã™ã€‚ãŸã£ãŸã®ï¼’ã‚¹ãƒ†ãƒƒãƒ—ã§ã™ã€‚ ã‚¢ãƒ‰ãƒ¬ã‚¹ãƒãƒ¼ã«ã€Œchrome://net-internals/#dnsã€ã¨å…¥ã‚Œã‚‹ ã€ŒClear host cacheã€ã¨ã„ã†ãƒœã‚¿ãƒ³ã‚’ã‚¯ãƒªãƒƒã‚¯ã™ã‚‹ ãŸã£ãŸã“ã‚Œã ã‘ã§ã™ã€‚Â ç°¡å˜ã§ã™ãã€‚ã“ã‚Œã‚’ã—ã¦å†åº¦è©²å½“ã®URLã«ã‚¢ã‚¯ã‚»ã‚¹ã—ã¦ã¿ã¦ãã ã•ã„ã€‚ å‚
limitusus 2014/01/21
Chrome

dns
ãƒªãƒ³ã‚¯
NTPãƒ™ãƒ¼ã‚¹ã®DDoSæ”»æ’ƒã‚’ç†è§£ã™ã‚‹ - ãƒ¯ã‚¶ãƒŽãƒ | wazanova
http://blog.cloudflare.com/understanding-and-mitigating-ntp-based-ddos-attacks1 comment | 0 pointså¹´åˆã«League of Legendsã€EA.comã®ã‚µãƒ¼ãƒãŒãƒ€ã‚¦ãƒ³ã™ã‚‹åŽŸå› ã¨ãªã£ãŸNTPãƒ™ãƒ¼ã‚¹ã®DDoSæ”»æ’ƒã«ã¤ã„ã¦ã€CoudFalreãŒã‚¨ãƒ³ã‚¸ãƒ‹ã‚¢ãƒ–ãƒã‚°ã§ã¾ã¨ã‚ã¦ã„ã¾ã™ã€‚ DNS Reflection is so 2013 DNSãƒ™ãƒ¼ã‚¹ã®DDoSæ”»æ’ƒã¨NTPãƒ™ãƒ¼ã‚¹ã®æ”»æ’ƒã¯ä¼¼ã¦ã„ã‚‹ã€‚ãƒ—ãƒãƒˆã‚³ãƒ«ã®é•ã„ã ã‘ã€‚æ”»æ’ƒè€…ãŒã€è¢«å®³è€…ã¨ãªã‚‹ç›¸æ‰‹ã®IPã‚¢ãƒ‰ãƒ¬ã‚¹ã‚’å½ã£ã¦ãƒ‘ã‚±ãƒƒãƒˆã‚’é€ä»˜ã€‚äº‹æƒ…ã‚’çŸ¥ã‚‰ãªã„ã‚µãƒ¼ãƒã¯ã€ãƒªã‚¯ã‚¨ã‚¹ãƒˆã«å¿œãˆã¦ã€è¢«å®³è€…ã®IPã‚¢ãƒ‰ãƒ¬ã‚¹ã«ãƒ‡ãƒ¼ã‚¿ã‚’è¿”ã™ã¨ã„ã†ä»•çµ„ã¿ã€‚å®Ÿéš›ã®æ”»æ’ƒè€…ã®ã‚½ãƒ¼ã‚¹ã¯éš ã•ã‚Œã¦ã„ã¦ã€ãƒˆãƒ¬ãƒ¼ã‚¹ã™ã‚‹ã®ãŒé›£ã—ã„ã€‚ã‚‚ã—å¤§é‡ã®ã‚µãƒ¼ãƒãŒåˆ©ç”¨ã•ã‚Œã‚‹ã¨ã€ç›¸å½“ã®ãƒœãƒªãƒ¥ãƒ¼ãƒ ã®ãƒ‘ã‚±ãƒƒãƒˆãŒã€ä¸–ç•Œä¸ã‹ã‚‰è¢«å®³è€…
limitusus 2014/01/13
dns

ntp

security

DDoS
ãƒªãƒ³ã‚¯
DNS ãƒˆãƒ©ãƒ–ãƒ«ã‚·ãƒ¥ãƒ¼ãƒ†ã‚£ãƒ³ã‚°
limitusus 2013/11/15
dns

IIJ

bind

linux

ãŠå½¹ç«‹ã¡
ãƒªãƒ³ã‚¯
ã‚ªãƒ¼ãƒ—ãƒ³ãƒªã‚¾ãƒ«ãƒç¢ºèªã‚µã‚¤ãƒˆå…¬é–‹ã®ãŠçŸ¥ã‚‰ã›
å„ä½ <<< ã‚ªãƒ¼ãƒ—ãƒ³ãƒªã‚¾ãƒ«ãƒç¢ºèªã‚µã‚¤ãƒˆå…¬é–‹ã®ãŠçŸ¥ã‚‰ã› >>> JPCERT/CC 2013-10-31 I. æ¦‚è¦ JPCERT/CCã¯ã€ãŠæ‰‹å…ƒã® PC ã‹ã‚‰ã‚ªãƒ¼ãƒ—ãƒ³ãƒªã‚¾ãƒ«ãƒã®ç¢ºèªãŒã§ãã‚‹ã‚µã‚¤ãƒˆã‚’å…¬é–‹ã„ãŸã—ã¾ã—ãŸã€‚ ã‚ªãƒ¼ãƒ—ãƒ³ãƒªã‚¾ãƒ«ãƒç¢ºèªã‚µã‚¤ãƒˆ http://www.openresolver.jp/ ã‚ªãƒ¼ãƒ—ãƒ³ãƒªã‚¾ãƒ«ãƒã¨ã¯ã€å¤–éƒ¨ã®ä¸ç‰¹å®šã® IP ã‚¢ãƒ‰ãƒ¬ã‚¹ã‹ã‚‰ã®å†å¸°çš„ãªå•ã„åˆã‚ã›ã‚’è¨±å¯ã—ã¦ã„ã‚‹ DNS ã‚µãƒ¼ãƒã®ã“ã¨ã§ã™ã€‚ã‚ªãƒ¼ãƒ—ãƒ³ãƒªã‚¾ãƒ«ãƒã¯å›½å†…å¤–ã«å¤šæ•°å˜åœ¨ã—ã€å¤§è¦æ¨¡ãª DDoS æ”»æ’ƒã®è¸ã¿å°ã¨ã—ã¦æ‚ªç”¨ã•ã‚Œã¦ã„ã‚‹ã¨ã®å ±å‘ŠãŒã‚ã‚Šã¾ã™ã€‚ JPCERT/CC Alert 2013-04-18 JPCERT-AT-2013-0022 DNS ã®å†å¸°çš„ãªå•ã„åˆã‚ã›ã‚’ä½¿ã£ãŸ DDoS æ”»æ’ƒã«é–¢ã™ã‚‹æ³¨æ„å–šèµ· https://www.jpcert.or.jp/at/2013/at130022.html ã¾ãŸã€DN
limitusus 2013/10/31
security

dns

JPCERT
ãƒªãƒ³ã‚¯
DNSç§»è»¢å¤±æ•—ä½“é¨“è«‡
æ™‚åŠ¹æˆç«‹ã€‚ è©³ã—ãçŸ¥ã‚ŠãŸã„æ–¹ã¯ä¸‹è¨˜ã‚µã‚¤ãƒˆã¸ ã‚ãƒ£ãƒƒã‚·ãƒ¥ã‚µãƒ¼ãƒã‚’æ¨©å¨ã‚µãƒ¼ãƒã¨å…¼ç”¨ã™ã‚‹ã¨å±ãªã„ http://www.e-ontap.com/dns/weirdra/ æµ¸é€ã„ã†ãª! http://www.e-ontap.com/dns/propagation/ ã‚µãƒ¼ãƒé‹ç”¨ã—ã¦ã„ã‚‹äººã¯ã“ã¡ã‚‰!!! http://www.slideshare.net/hdais/auth-cachebindconfig Read less
limitusus 2013/06/26
dns

network

trouble
ãƒªãƒ³ã‚¯
yebo blog: DNSSECã®å‹‰å¼· (12)
2007/02/23 DNSSECã®å‹‰å¼· (12) ä»Šå›žã¯ã€DNSã‚’çŸ¥ã‚‹ä¸Šã§å¿…éœ€ãƒ„ãƒ¼ãƒ«ã®digã‚³ãƒžãƒ³ãƒ‰ã‚’ç°¡å˜ã«å¾©ç¿’ã€‚digã®åŸºæœ¬å½¢ã¯æ¬¡ã®é€šã‚Šã§ã‚ã‚‹ã€‚ dig @server [options] name q-type [q-class] [queryopt...] server ç…§ä¼šå…ˆã®ã‚µãƒ¼ãƒ(IPã‚¢ãƒ‰ãƒ¬ã‚¹ã‚‚ã—ãã¯FQDN) name èª¿ã¹ãŸã„RRã®åå‰ q-type ç…§ä¼šã‚¿ã‚¤ãƒ—(æŒ‡å®šãŒç„¡ã„ã¨Aãƒ¬ã‚³ãƒ¼ãƒ‰) a,any,mx,ns,soa,hinfo,axfr,txt,ptr, ...ãªã©ã¨æŒ‡å®šã™ã‚‹ axfrã¯ã‚¾ãƒ¼ãƒ³è»¢é€ ixfrã®å ´åˆã€ã‚·ãƒªã‚¢ãƒ«ç•ªå·ã®æŒ‡å®šã‚‚å¯ (ixfr=version) q-class ç…§ä¼šã‚¯ãƒ©ã‚¹(æŒ‡å®šãŒç„¡ã„ã¨IN) in,any,hs(HESIOD),ch(CHAOS) ã¡ãªã¿ã«ã€digã¨ã‚¿ã‚¤ãƒ—ã—ãŸã ã‘ã®å ´åˆã€dig . ns (rootã®ãƒãƒ¼ãƒ ã‚µãƒ¼ãƒ)ã¨ãªã‚‹
limitusus 2009/08/13
dns

dig

bind
ãƒªãƒ³ã‚¯
NSD
ã“ã“ã«æ›¸ã„ã¦ã‚ã‚‹æƒ…å ±ã¯ã‚¯ã‚½å¤ã„ã§ã™ã€‚ã€Œæ˜”ã® NSD ã¯ã“ã†ã ã£ãŸã‚“ã ã€ã¨æ‡ã—ã‚€ä»¥å¤–ã®å½¹ã«ã¯ç«‹ã¡ã¾ã›ã‚“ã€‚NSD æœ¬å®¶ã‚’è¦‹ã¾ã—ã‚‡ã†ã€‚ maya.st ã®æƒ…å ±ã‚’ç®¡ç†ã—ã¦ã„ã‚‹ DNS ã¯ BIND ã‚„ djbdns ã§ãªãã€NSD ã§å‹•ã„ã¦ãŠã‚Šã¾ã™ã€‚NSD ãªã‚“ã¦ãœã‚“ãœã‚“çŸ¥ã‚‰ãªã„ã€ã‚ã‚‹ã„ã¯çŸ¥ã£ã¦ã„ã¦ã‚‚ã›ã„ãœã„åå‰ã ã‘ã€ã¨ã„ã†äººãŒç¾çŠ¶ã§ã¯ã»ã¨ã‚“ã©ã ã¨æ€ã‚ã‚Œã‚‹ã®ã§ã€ã¡ã‚‡ã£ã¨ã—ãŸç´¹ä»‹ãªã©ã€‚ NSD ã£ã¦ï¼Ÿ DNS ã‚³ãƒ³ãƒ†ãƒ³ãƒ„ã‚µãƒ¼ãƒã€‚ã©ã“ã®é¦¬ã®éª¨ã¨ã‚‚çŸ¥ã‚‰ã¬æ€ªã—ã’ãªãƒ—ãƒãƒ€ã‚¯ãƒˆã§ã¯ãªãã€13å€‹ã® DNS ãƒ«ãƒ¼ãƒˆã‚µãƒ¼ãƒã®ä¸€éƒ¨({h,k}.root-servers.net)ã‚’æ‹…ã£ã¦ã„ã‚‹ã¨ã„ã†ååˆ†ãªå®Ÿç¸¾ã‚’æŒã£ã¦ã„ã‚‹ã€‚é–‹ç™ºå…ƒã¯ã‚ªãƒ©ãƒ³ãƒ€ã® NLnetLabs ã¨ã„ã†ã¨ã“ã‚ã€‚ ãƒ¡ãƒªãƒƒãƒˆã¯ã€é€Ÿã„ã€è»½ã„ã€ç°¡å˜ã€‚UNIX ç³» OS ã§ã¯ BIND8 ãŒé«˜é€Ÿã ã¨è¨€ã‚ã‚Œã¦ã„ã‚‹ãŒã€ãã®æ•°å€ã®ãƒ‘ãƒ•ã‚©ãƒ¼ãƒžãƒ³ã‚¹ãŒå‡ºã‚‹ã‚‰ã—ã„ã€‚è¨å®šãƒ•ã‚¡ã‚¤ãƒ«ã‚‚
limitusus 2009/02/07
dns

NSD
ãƒªãƒ³ã‚¯
DNS(BIND)ã®è¨å®š(Windowsç·¨)
ãŠã‚„ã˜å®…ã¸ã®ã‚¢ã‚¯ã‚»ã‚¹ã¯ã€ç¾åœ¨ã¯è‡ªå®…DynamicDNSã«ã‚ˆã‚Šé‹ç”¨ã•ã‚Œã¦ã„ã¾ã™ã€‚ä¸‹è¨˜ã¯ã€ãã‚Œä»¥å‰ã«ãŠä¸–è©±ã«ãªã£ã¦ã„ãŸã€ZIONã•ã‚“ã®ã‚µãƒ–ãƒ‰ãƒ¡ã‚¤ãƒ³ã§é‹ç”¨ã—ã¦ã„ãŸã¨ãã®ã‚‚ã®ã§ã™ã€‚åŸºæœ¬çš„ã«ã¯ã€ç¾åœ¨ã‚‚å¤‰ã‚ã‚Šã‚ã‚Šã¾ã›ã‚“ã€‚ Windowsã‚µãƒ¼ãƒã§ã‚‚å†…å‘ãDNSã‚’å‹•ã‹ã—ã¦ã¿ã¾ã—ãŸã€‚ãŠã‚„ã˜ã¨åŒã˜ã‚ˆã†ã«ã€å®¶åºå†…ã§ã‚‚ãƒ›ã‚¹ãƒˆåã§ã‚¢ã‚¯ã‚»ã‚¹ã—ãŸã‹ã£ãŸã‚Šã€ãƒ—ãƒãƒã‚¤ãƒ€ã®DNSã§é »ç¹ã«DNSã‚¨ãƒ©ãƒ¼ãŒã§ã‚‹ãŸã‚ã€ã“ã‚Œã‚’å°‘ã—ã§ã‚‚å›žé¿ã—ãŸã„ï¼ˆã¤ã¾ã‚Šã‚ãƒ£ãƒƒã‚·ãƒ¥ï¼‰ã€å°†æ¥ã€å›ºå®šIPã«ã—ãŸã¨ãã«ã¯DNSã‚’è¨ç½®ã™ã‚‹ã®ã§DNSã®å‹‰å¼·ã‚’ã—ãŸã„æ–¹ã¯å‹•ã‹ã—ã¦ã¿ã‚‹ã¨ã„ã„ã§ã—ã‚‡ã†ã€‚ ä»¥ä¸‹ã¯ã€ãŠã‚„ã˜å®…ã®ãƒãƒƒãƒˆãƒ¯ãƒ¼ã‚¯æ§‹æˆã§ã®è¨å®šã§ã™ã€‚å®¶åºå†…ã ã‘ã®DNSã§ã™ã®ã§ã€ã‚¤ãƒ³ã‚¿ãƒ¼ãƒãƒƒãƒˆã§ä½¿ã‚ã‚Œã¦ã„ã‚‹ãƒ‰ãƒ¡ã‚¤ãƒ³å(example.zive.net)ã‚’ãã®ã¾ã¾ä½¿ç”¨ã§ãã‚‹ã‚ˆã†ã«ã—ã€å†…å‘ãã«ã€example.zive.netã§ã‚µãƒ¼ãƒã®ãƒ—ãƒ©ã‚¤ãƒ™ãƒ¼ãƒˆã‚¢ãƒ‰ãƒ¬ã‚¹ã‚’è¿”ã™ã‚ˆã†ã«ã—ã¾ã—ãŸã€‚
limitusus 2008/11/19
bind

dns

server
ãƒªãƒ³ã‚¯
1