Geek Answers Handbook

Failed to investigate DNS poisoning between China and the United States

I am interested to know how DNS queries for political sites vary in different countries.

I need to know how I can send a DNS query to a remote computer, say, in China. Then I want to compare the results with the USA. The purpose of the experiment is to gain practical experience regarding the concept of DNS poison. I think my lectures are so theoretical.

How can you compare DNS queries between China and the United States , so that I can investigate DNS poisoning?

+4
source share
4 answers

It depends a little on how the queries change. If the server gives different results depending on your locality, then it will not be directly requested. If your requests are poisoned by a caching server between them, these methods may help.

If you have shell accounts in different parts of the world, you can perform a simple test.

I use 'dig' which is available on most * nix systems. If you use Windows, you can find an alternative in this list of DNS tools

To find responsible DNS servers
dig ns domain-in-question.com @the.dns.server.you.want.to.use
To get IP addresses for a host name
dig a host.domain-in-question.com @the.dns.server.you.want.to.use
(You can skip the @ .. part to start with your current server)

I recommend trying both from different parts of the world to make sure that the server itself gives different results or if the cache servers are poisoning on the way.

In addition, the search for "how to poison dns" gave me a number of practical results.

+4
source

You can simply use nslookup (the server command allows you to specify the DNS server to query)

+2
source

Try this web tool:

http://www.kloth.net/services/dig.php

Regarding the recognition of DNS poisoning, each computer has settings for which the DNS server trusts, and so on. If one of them in the chain is compromised, each subsequent computer will receive bad information.

+2
source

If the remote servers are configured correctly, they will not allow you to poll them.

Any recursive resolver should only be configured to provide answers to the clients it should serve.

+2
source

More articles:


All Articles