Questions tagged [dns]
The Domain Name System (DNS) translates Internet domain and host names to IP addresses.
788
questions
1
vote
0
answers
40
views
If I flushed my DNS can my school see what i have been doing on my laptop? [closed]
For context, i use my own computer on my own internet access, only thing is i log into my google account as a user, now i flushed my DNS history, can my school still see my history?
1
vote
1
answer
72
views
How can I prevent ISP DNS snooping when using piHole [duplicate]
I have home network set up to use piHole and piHole uses 1.1.1.1 and 8.8.8.8 as DNS resolvers. This, however, doesn't prevent ISP snooping on my DNS traffic, as DNS traffic is UDP unencrypted, as I ...
- 43
3
votes
2
answers
182
views
Avoid leaking IP address of my home DNS server
I'm using AdguardHome as a DNS server to filter a lot of stuff. As an upstream DNS, I use a bind server which acts as a local root server (as described at https://localroot.isi.edu). This server is in ...
- 41
2
votes
0
answers
95
views
Does DNSSEC prevent man-in-the-middle at all? [duplicate]
I just watched a video on DNS that explained that if there is a man-in-the-middle or if someone has taken over your resolver, DNSSEC can prevent the responses from being tampered with because the ...
- 23
0
votes
1
answer
145
views
How can I test in my device checks DNS CAA correctly and rejects TLS certificates that are signed by an unauthorized CA?
I would like to know how I can test if my devices, or browsers1 checks and applies DNS Certification Authority Authorization (CAA) correctly. And if it does not, how I can enable it and enforce CAA to ...
- 6,715
0
votes
0
answers
111
views
Understanding DNSSEC NSEC3 output for valid domain name
I am trying to understand NSEC3 record when querying for existing domain name, for NXDOMAIN I understand how it works. RFC has example about WildCard, NODATA & NXDOMAIN
So I fired these queries ...
- 105
0
votes
0
answers
29
views
When using a VPN is the device DNS cache still written to? [duplicate]
When I am using ProtonVPN, does the VPN server run DNS resolution upon receiving the request, similar to a Tor exit node, thereby bypassing the device's DNS cache?
Or do my browser's DNS queries still ...
- 101
0
votes
2
answers
147
views
Why spamassasin is doing dns lookup?
I have a server which have configured Amavis and Spamassasin (in default state only). I recently noticed log lines that probably indicate DNS query failure, below is an excerpt:
Nov 21 11:15:40 ...
- 133
7
votes
2
answers
2k
views
What happens if a DNS record points to non-controlled IP address?
If a domain, for example foo.com is pointed to a IP address (A record) outside of my control, for example the Twitter IP address. And the domain is visited using a browser:
What will be displayed in ...
- 423
3
votes
1
answer
488
views
Is Android private DNS using domain name a security risk?
Android has the option for using private DNS, but it requires a hostname, not an IP of the DNS server. Isn't entering the domain name of a DNS server a chance for MITM attacks and DNS poisoning?
How ...
0
votes
2
answers
241
views
Why does turning on encrypted DNS unblock some geo locked websites?
When I turn on Warp provided by Cloudflare or use 1.1.1.1, it unlocks some of the websites which are geo locked. How does it unblock the websites which are blocked by ISP?
- 11
1
vote
1
answer
152
views
Is it reasonable to have a product that requires LLMNR or mDNS?
I am trying to figure out the best way to manage security certificates for embedded devices who's webpage is accessed via IP address, and then the scenario for when that IP address changes.
Currently, ...
0
votes
1
answer
126
views
How can an email forwarding service send email with a "From" from a domain they don't control, and still pass SPF?
Let's say:
[email protected] sends an email to [email protected].
Bob owns the domain bob.com but doesn't manage an emailing server. Instead he uses an email forwarding service (provided by his registrar /...
- 953
0
votes
0
answers
135
views
What is the easiest and most effective way to filter IP-only accesses?
On MacOS and Windows 11, I’ve repeatedly seen direct IP accesses to *.deploy.static.akamaitechnologies.com domains (discovered via PTR DNS lookups). DNS filters like NextDNS presumably don’t see this ...
- 143
1
vote
1
answer
307
views
Can DNS providers know my IP address?
I know how domain name system (DNS) works a bit. But don't know if providers of public DNS like Google or Cloudflare can know my IP address.
user295767