full-disclosure - DNS query???

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

From: m0rtis at adelphia.net (Mortis)
Subject: DNS query???

 > Just forgot to mention that the source port
 > and destination port 53
 > mentioned is UDP protocol

I'm copying you personally this time in case you missed my message yesterday.

There is no mystery about DNS servers using port 53 to send queries to 
other servers port 53.  This is how DNS works on a Windows box.  [@1]

You do not understand DNS.  You also don't understand something about your 
configuration (or something about how servers refer queries to other 
servers).  Read the links I sent you. [@2][@3]

Search the newsgroup I pointed you to [@4] or find another similar one - 
someone else has probably asked this question before.  I can't remember the 
last time I couldn't answer my own question with a google search.  Spend a 
little time on it.

If you have no luck, trace the traffic on your secondary server using 
ethereal [@5]. See it talk to the primary and/or the root server.  Use 
ethereal to figure out why.

Using ethereal is a basic skill. If you don't know it, learn it.  There are 
newsgroups for that, too, so please don't post your questions about it 
here.  Things are much more productive when you go to the right place.  And 
safer.

If you can't figure it out, take the ethereal output, clean it up, and post 
it to the newsgroup I pointed you to and ask them for help.  People are 
just sitting there waiting for issues like yours.  They like DNS.  They care.

Spend some time putting together all of the relevant data.  A statement 
like "the forwarder is correctly set" means nothing.  No one can help you 
with that information [@6].  If it was correct you wouldn't have a 
problem/question.

Document all of the settings in the properties boxes for both servers, 
change the names and ips, and post that.  Do you have recursion checkboxes 
set?  Root hints?  Complete posts get accurate answers.

[@1] http://www.google.com/search?q=dns+server+port+53+udp

[@2] http://support.microsoft.com/search/default.aspx?Query=DNS

[@3] http://www.dns.net/dnsrd/rfc/

[@4] http://groups.google.com/groups?group=microsoft.public.win2000.dns

[@5] http://www.ethereal.com/

[@6] http://www.catb.org/~esr/faqs/smart-questions.html

--
Mortis