SECFND 6: Network Applications Flashcards
DNS Resource Record
RR defines the DNS data types that are stored in the DNS database. SOA, MX, A, AAAA, NS, PTR, CNAME
stub DNS resolver
Client device OS
DNS recursive resolver
DNS server that processes requests. Queries the authoritative DNS server for RR information
Open DNS recursive resolver
Allow queries from all addres (8.8.8.8, etc.)
Authoritative DNS Server
Responsible for all domain RR’s. Provide auth responses to DNS recursive resolvers
DNS Zones
In addition to being divided into domains, the DNS name space is partitioned into zones to simplify DNS database management..
Zone file is a text file.
A record
Maps names to IPv4 addresses
AAAA
Map hostnames to IPv6 addresses
MX record
Maps DN to mail servers for that domain
PTR record
PTR points to a canonical name. The most common use is for implementing reverse DNS lookups, mapping an IP address to the hostname.
NS Record
identifies the DNS servers that are responsible (authoritative) for a zone.
CNAME record
specify that a domain name is an alias for another domain name, which is the “canonical” domain name.
TXT Record
used to associate any arbitrary text with a hostname. Used for DKIM
SOA Record
Start of authority. Each zone contains an SOA record. Identifies the name server that is the best source of information for the data within the zone. The SOA record also contains various other parameters that define the behavior of the DNS server.
DNS Recursive query steps
- DNS resolver queries DNS recursor.
- DNS recursor sends query to root name server.
- Root name servers send a DNS referral to DNS recursor informing it to ask the gTLD name servers for the .com/.net/,org domain space.
- DNS recursor sends query to gTLD servers looking for domain name (cisco.com)
- GTLD servers send DNS referral to DNS recursor informing it to ask the cisco.com name servers about domain name space.
- DNS recursor sends a query to ns1.cisco.com or ns2.cisco.com
- Cisco servers send auth DNS response to DNS recursor with A RR info
- DNS recursor sends a response to the DNS resolver