Dynamic DNS Security Blues

3 years ago thenewstack.io

Summary: This is a summary of an article originally published by The New Stack. Read the full original article here →

Whenever you run into a network problem, the wise network admin or sysadmin always remembers “It’s always DNS [Domain Name Service].” And, if you think that’s bad, just wait until you see just how trivial this attack is.

This means, for those of you who haven’t suffered from fixing endless DNS problems, you get control of the hosted zone.

So, when they point DNS queries to their IP address, whenever a DNS client queries this name server about itself, which thousands of devices do automatically to update their IP address within their managed network, that traffic goes directly to their IP address.

The theory was that DNS hosts provide an easy-to-use, self-service platform that enables users to make updates to their domain name and what name servers it points to.

DevOps Articles