新聞財經娛樂♬資訊 News Economy

For my memo only,
you trigger me to have idea for my system
I could do  a script on window system to to check DNS sestting is correct
to point to authoriized agent/DNS server before sending any http request for security
I think there is some software or firewall already made that for us.

That might be next tutorial thread

Thanks for all of your reply.

We should understand more or in deep on concept, fudmential, basis for all networking or computer hardware or software if we want to protect our computer or system in good security.

In other words, we should know more kownledge than hacker or cracker in order to
flight them down to protect our computer network system.

I mean you will think
my testing case for cisco.com will work mentioned above, Right ?

If my setup as I said is set correcly, it will work, just type cisco.com on my broswer, it wil go to my website since both zone files are same on my server

IF yes, the tuturial wil be end for this thread.

Be reminded, it is tutorial for DNS concept and that is not related "legal or not"

Just do test case study

my server named.conf file is  already set "recusion no" so that  there is no DNS forwardering to other DNS server.


named.conf
==========
view    "external" {
/* This view will contain zones you want to serve only to "external" clients
 * that have addresses that are not on your directly attached LAN interface subnets:
 */
    recursion no;

}

if "recursion yes" is set
Client --> Your-DNS-Server --> ISP-DNS-Server
if "recursion no" is set
Client --> Your-DNS-Server

RIght ?

Hope you bring a simple testing or test case for this tutorial for DNS concept

much better understanding from your reply

But could I create zone file for cisco.com or facebook.com manully by myself on linux server,  just for concept testing(no need complicated) ?

at /var/named/, there is zone file for mysite.com which is called, mysite.com.db
for testing or fast example, I can create or  copy mysite.com.db to cisco.com.db

and then include  it in /etc/named.conf and save it
zone "mysite.com" {
      type master;
      file "/var/named/mysite.com.db";
};
zone "cisco.com" {
      type master;
      file "/var/named/cisco.com.db";
};

and then restart named.conf by service command


DO you think that is possible to get the testing succesffuly ?
so when I try cisco.com on my browser, it will go to website of mysite.com since
the cisco zone file is same as mysite.com.db on linux server at /var/named/ directory

Right ?

Duncan