Microsoft® Windows® 2000 Security Handbook

Summary

In this chapter, I have discussed the most common forms of name resolution available to Windows 2000. I began the discussion with DNS, the original name resolution service still used for the Internet, and then covered Dynamic DNS and its ties to DHCP. I also covered several of the security issues to be aware of with DNS servers. They include the following:

• Denial of Service Attacks

• DNS Hijacking (Spoofing)

• Unauthorized Zone Transfers

• Cache Corruption

I also discussed the vulnerability that widespread use of DHCP can add to your network. With DHCP, the main vulnerability lies in the fact that anyone who can get physical access to a network can get an IP address, can access to your DNS table, and from there can launch an attack on any machine ...