2
votes
1answer
273 views

How to check if port forwarding is enabled?

I have just set up a DNS server for my own network, and many guides online suggest to make sure that port forwarding on port 53 is not enabled. The thing that is not clear to me is this: should I ...
1
vote
2answers
670 views

DNSCrypt, Unbound and DNSSEC

I would like to have an encrypted DNS queries + a DNS Cache + Domain Name System Security Extensions (DNSSEC) . I used this bash script to install DNSCrypt and I choosed to use dnscrypt.eu servers : ...
18
votes
4answers
16k views

What is the point of sshd “UseDNS” option?

I know what it does, but i don't know why. What attack(s) does it prevent ? Is it relevant for all kind of authentication methods ? (hostbased, password, publickey, keyboard-interactive ...)
1
vote
0answers
436 views

How to make dnsmasq avoid DNS cache poisoning?

Some domain gets DNS cache poisoning if dnsmasq is the nameserver. But the problem is gone if switch to BIND (named). Is there a easy configuration of dnsmasq so that DNS cache poisoning can be ...
1
vote
2answers
473 views

DNSSEC in the root zone? How to use it?

I'm using Fedora for desktop use and I: yum -y install caching-nameserver service named restart chkconfig --level 5 named on on it, and set the nameserver to 127.0.0.1. If I: dig google.com | grep ...