Search:  

 
 
   All ForumsHot TopicsGallery






how-to block ads


 
Forums » Major DNS Flaw Finally Publicized » DNS outdated
Search Topic:
Uniqs:
190
Share Topic:
RSS topic:
toggle:
flat / full
normal / watch
Post a:
Post a:
« DNS flaw..  
AuthorAll Replies
-

Skippy25

join:2000-09-13
Hazelwood, MO

reply to sivran
Re: DNS outdated

That is how DNS works.

If you have a DNS server and it does not have the answer it goes to the authoritive DNS server that is configured for it. It won't be going to Googles as mentioned above, it will eventually go to the root .com server which is what controls all .com DNS names.


sivran
Long Live The Suite
Premium
join:2003-09-15
Arlington, TX
clubs:
·RoadRunner Cable

reply to ISurfTooMuch
Right. Just run a local, caching DNS server that's configured to forward on to the ISP (or Open, or Level3) if it doesn't know the answer. No need for an end-user DNS to go straight to the authority, just up to the next link in the chain.

Mine currently forwards to OpenDNS for whatever it doesn't know.
--
The right of the people to be secure in their persons, houses, papers, and effects, against unreasonable searches and seizures, shall not be violated, and no warrants shall issue, but upon profitable cause...


Boricua65

join:2002-01-26
Puerto Rico
 reply to Nerdtalker
Thank you for that. My is now fixed.
--
Yo te digo, el mundo esta jodido

cornelius785

join:2006-10-26
Worcester, MA

reply to ronpin
well let's see, if the URL is not cached in your dns server, it has to ask for it in another server (not yours). if that server's record is incorrect, well guess what, yours will be incorrect.

i also don't really see the advantage of running your own DNS server for most people. sure it may be faster, but the dns retrieval is nearly nothing compared to the downloading of content and then processing.


Nerdtalker
Working Hard, Or Hardly Working?
Premium,MVM
join:2003-02-18
Tucson, AZ
clubs:
reply to ronpin
Or you could just use OpenDNS, which, by the way, was secure the whole time.

::shrug::

ISurfTooMuch

join:2007-04-23
Tuscaloosa, AL


1 edit
reply to ronpin
You could, but why would you want to increase the load on authoritative DNS servers out there? Right now, if you type in www.google.com, if you don't have the IP address already cached, your machine queries your ISP's DNS server, which already knows the correct IP address. Google's nameservers only get queried if your ISP doesn't have an IP address cached on their DNS servers. If everyone was running DNS, Google's servers are going to get hammered, since queries won't just be coming from a few thousand ISPs but from a few hundred million users.

Also, as hard as it is to patch DNS servers now, can you imagine if everyone was running DNS? Instead of patching a few thousand machines, you'd have to patch a few hundred million.


ronpin
Imagine Reality

join:2002-12-06
Nirvana
DNS was cool when speeds were slow and memory expensive. Now we could all run our very own DNS servers on the cheap. Why not?
--
50% of Americans vote - 30% are repugs -- do the math.
Forums » Major DNS Flaw Finally Publicized« DNS flaw..  


Thursday, 03-Dec 14:33:21 Terms of Use | Privacy Policy | Hosting by www.nac.net - DSL,Hosting & Co-lo | feedback | contact
over 10 years online! © 1999-2009 dslreports.com.
page compression OFF
Most commented news this week
· [162] Comcast Releasing Promised Usage Meter
· [129] Avast Antivirus Has Gone Mad
· [103] Graduate Student Unveils Sprint's GPS Sharing With Feds
· [81] Latest Consumer Reports Survey Not Kind To AT&T
· [75] Comcast Makes NBC Universal Acquisition Official
· [70] Baltimore To Ban Lazy Cable Installs
· [64] Broadband Killed The Game Console
· [55] Rogers Unveils The ISP Dream Model
· [47] ACTA: Global Three Strikes
· [43] Cable Industry's 'Adoption Plus': Altruism Or PR Stunt?
Most people now reading
· False positive in Avast! or is it real? [Security]
· Warrior tank seem underpowered these days [World of Warcraft]
· [TWC] Audio/Video outage in Brooklyn [Time Warner Cable TV/Voice]
· [Rant] Disrespect of PTO [Rants, Raves, and Praise]
· Quality/longevity of 15A 120V receptacles [Home Repair & Improvement]
· Many Sites Unreachable [Rogers]
· Microsoft actively urges IE 6 users to upgrade [Security]
· Usenet Services- Clarification [TekSavvy]
· HELP! Leveling up! [World of Warcraft]