DNS
Secure internet using DNS based traffic filter – pi-hole
Internet has grown as rapidly in last two decades. A number of resources on internet remain uncensored, uncontrolled because there is no central authority and method to monitor everything. There are “bad guys” across globe who plant malicious software, misleading ads on internet. Now, with internet ready handheld devices and smart TVs people use a […]
Secure Master Slave DNS transactions using TSIG
After we have completed Master slave configuration now we will try to secure transactions between master and slave DNS servers. To achieve this we will use TSIG (Transaction SIGnature). Master DNS, 192.168.0.10, mns1.ns.mka.in Slave DNS, 192.168.0.11, sns1.ns.mka.in On the master DNS server Generate TSIG host Key in /etc/bind/corp/tsig directory dnssec-keygen -a HMAC-MD5 -b 128 -n […]
Master Slave DNS configuration on bind
DNS is one of the critical components of internet frame. Typical DNS architecture has Master, slave DNS servers and caching resolvers. All DNS data updates are populated into Master DNS servers and masters then replicate records on to slaves. Slaves are further exposed on internet where name caching servers query them for DNS records and […]