June 2018
Intermediate to advanced
368 pages
11h 1m
English
As defined in RFC 2136, this method of updating a zone sends an update query packet to the authoritative master nameserver and is secured via TSIG.
DHCP servers frequently use this method to update the DNS after assigning an IP address to a remote client.
Beware of non-secure DDNS updates.
Even if you are not using RFC 2136-style DDNS updates (and especially if you are), be sure to secure your nameservers against non-secure updates or zone poisoning.
A recent paper found that among popular production domains, enough were found to be vulnerable to warrant reporting on (roughly 0.06%). Vulnerable nameservers included those from governments, health care providers, and banks.
This method is typically not ...
Read now
Unlock full access