Xafiisyada DNS iyo lacag la'aan ah

Liiska casriga ah ee ugu wanaagsan ee la heli karo oo dhamaystiran oo DNS ah

ISP- gaaga ayaa si toos ah ugu magacawday server-yada DNS markii aad adigu ama kombiyuutarkaaga internet-ka ku xirayso DHCP ... laakiin uma baahnid inaad isticmaasho kuwan.

Hoos waxaa ku jira server-yada lacag la'aan ah ee DNS aad isticmaali kartid halkii kuwa loo xilsaaray, kuwa ugu fiican oo ugu kalsoonaan kara, kuwaas oo ka yimid sida Google iyo OpenDNS, waxaad ka heli kartaa hoos:

Eeg Sidee baan u bedelaa Serverka DNS? caawimaad. Caawinaad badan ayaa ka hooseeya miisaankani.

Xoriyadaha & Adeegyada Dadweynaha ee Diiwaangashan (Abid April 2018)

Bixiye Server Primary DNS Server Secondary Server
Heerka 3 1 209.244.0.3 209.244.0.4
Verisign 2 64.6.64.6 64.6.65.6
Google 3 8.8.8.8 8.8.4.4
Quad9 4 9.9.9.9 149.112.112.112
DNS.WATCH 5 84.200.69.80 84.200.70.40
Comodo Hubi DNS 8.26.56.26 8.20.247.20
OpenDNS Home 6 208.67.222.222 208.67.220.220
Norton ConnectSafe 7 199.85.126.10 199.85.127.10
GreenTeamDNS 8 81.218.119.11 209.88.198.133
SafeDNS 9 195.46.39.39 195.46.39.40
OpenNIC 10 69.195.152.204 23.94.60.240
SmartViper 208.76.50.50 208.76.51.51
Dyn 216.146.35.35 216.146.36.36
FreeDNS 11 37.235.1.174 37.235.1.177
DNS kale oo dheeraad ah 12 198.101.242.72 23.253.163.53
Yandex.DNS 13 77.88.8.8 77.88.8.1
UncensoredDNS 14 91.239.100.100 89.233.43.71
Hurricane Electric 15 74.82.42.42
puntCAT 16 109.69.8.51
Neustar 17 156.154.70.1 156.154.71.1
Cabbitaanka 18 1.1.1.1 1.0.0.1
Goobta afaraad 19 45.77.165.194

Tixraac: Ururrada ugu muhiimsan ee DNS waxaa mararka qaarkood loo yaqaan 'DNS servers' ama 'DNS server' oo mararka qaarkood loo yaqaano 'DNS server' kale . Adeegyada aasaasiga ah iyo midka labaad ee DNS waxay noqon karaan "isku dhafan oo isku dheelitiran" si ay u bixiyaan lakab kale oo ka mid ah shaqaalaynta.

Guud ahaan, server-ka DNS ayaa loo gudbiyaa dhammaan noocyada magacyada, sida cinwaannada DNS server , server-yada DNS-ka , internet-ka , DNS cinwaanada IP , iwm.

Maxay u Isticmaalaan Adeegyada kala duwan ee DNS?

Hal sabab oo aad rabto inaad bedesho server-yada DNS ee udub dhexaad u ah ISP-gaaga haddii aad tuhunsan tahay in ay dhibaato ku tahay kuwa aad hadda isticmaalayso. Habka sahlan ee lagu tijaabinayo arinta DNS server waa adoo qoraya cinwaanka IP-ga ee shabakadda. Haddii aad ka heli karto website-ka cinwaanka IP, laakiin ma aha magaca, ka dibna server-ka DNS waxay u badan tahay inuu leeyahay arrimo.

Sabab kale oo loo baddalayo server-yada DNS waa haddii aad raadineyso adeeg ka fiican. Dad badan ayaa ka cabanaya in adeegsadayaasha DNS-ka ee ISP ay yihiin jahwareer waxayna gacan ka geystaan ​​in si guud loo yareeyo waayo-aragnimada guud.

Hase yeeshee, mid kale oo sii kordheysa oo ah isticmaalka DNS server ka ah dhinac saddexaad ayaa ah in laga hortago gundhigga hawlahaaga internetka iyo in aad ka gudubto xannibaadda boggaga internetka qaarkood.

Ogow, si kastaba ha ahaatee, in dhammaan server-yada DNS aysan ka hortagin diiwaangelinta taraafikada. Haddii taasi tahay waxa aad tahay ka dib, hubi inaad akhrido dhammaan faahfaahinta ku saabsan server si aad u ogaato haddii taasi tahay mid aad rabto inaad isticmaasho.

Raac joornaalada jadwalka kor ku xusan si aad wax badan uga ogaatid adeeg kasta.

Ugu dambeyn, haddii ay jiraan wax jahwareer ah, nambarka DNS lacag la'aan ah kuma siinayo internet bilaash ah! Weli waxaad u baahan tahay ISP si aad ugu xirto helitaanka - Adeegyada DNS kaliya waxay tarjumayaan cinwaanada IP iyo magacyada domainka si aad u geli karto boggaga leh magac magaceed loo akhrisan karo halkii cinwaan IP ah oo adagtahay.

Verizon DNS Servers & Other ISP Adeegyada gaarka ah ee DNS

Haddii, dhinaca kale, aad rabto in aad isticmaasho server-yada DNS-yada ah sida ISIS-gaaga, sida Verizon, AT & T, Comcast / XFINITY, iwm, ayaa go'aaminaya ugu fiican, ka dibna gacantaada cinwaanka server-ka ah iyaga lagu magacaabo auto assign .

Verizon DNS ayaa inta badan lagu taxay meelo kale sida 4.2.2.1, 4.2.2.2, 4.2.2.3, 4.2.2.4, iyo / ama 4.2.2.5, laakiin kuwa dhab ahaantii waxay bedelaan cinwaanada Server 3 ee ku yaal cinwaanka kor ku xusan. Verizon, sida ISP-yada intooda badan, waxay jecel yihiin in ay isu-dheellitiraan taraafikadooda adeegga DNS iyagoo adeegsanaya meelo degaan ah, shaqooyin toos ah. Tusaale ahaan, serverka aasaasiga ah ee Verizon DNS ee Atlanta, GA, waa 68.238.120.12 iyo Chicago, waa 68.238.0.12.

Qoraalka yar yar

Ha welwelin, tani waa mid yar oo daabacan!

Qaar badan oo ka mid ah bixiyeyaasha DNS ee kor ku qoran waxay leeyihiin heerar kala duwan (OpenDNS, Norton ConnectSafe, iwm.), Serverka IPv6 DNS (Google, DNS.WATCH, iwm.), Iyo goobo gaar ah oo aad door bidayso (OpenNIC).

Inkastoo aadan u baahnayn inaad wax ka ogaato wixii ka sarreeya waxa aan ku darnay jaantuska kor ku xusan, macluumaadkani waxa uu faa'iido u yeelan karaa qaar idinka mid ah, iyadoo ku xiran baahidaada:

[1] Nidaamyada lacag la'aanta ah ee DNS ee kor ku xusan sida Heerka 3 waxay si toos ah ugu socon doonaan serverka ugu dhow ee DNS oo ay ku shaqeyneyso Level3 Isgaarsiinta, shirkadda bixisa ISP-yada intooda badan ISP-yada Maraykanka ee helitaanka lafaha internetka. Waxaa ka mid ah 4.2.2.1, 4.2.2.2, 4.2.2.3, 4.2.2.4, 4.2.2.5, iyo 4.2.2.6. Nidaamyadan waxaa badanaa la siiyaa Verizon DNS servers laakiin taasi ma ah farsamo ahaan kiiska. Fiiri wadahadal kore.

[2] Verisign waxay tiraahdaa arintaan ku saabsan server-yada lacag la'aan ah ee DNS: "Ma iibin doono macluumaadkaaga guud ee DNS ee dhinacyada saddexaad ama aan dib u habeynin su'aalahaada si ay kuu adeegaan xayeysiin kasta." Verisign wuxuu bixiyaa IPv6 guud ee serverka DNS sidoo kale: 2620: 74: 1b :: 1: 1 iyo 2620: 74: 1c :: 2: 2.

[3] Google waxay sidoo kale bixisaa dadwaynaha dadweynaha ee IPv6: 2001: 4860: 4860 :: 8888 iyo 2001: 4860: 4860 :: 8844.

[4] Quad9 waxay isticmaashaa wakhti dhab ah oo ku saabsan waxa websaydhku ay yihiin kuwo xaasidnimo ah oo si buuxda u mamnuucaya. Waxba laguma faahfaahin - meeraha kaliya ee phishing ah , oo ay ku jiraan nacfac , iyo ka faa'iidaysiga aaladaha qalabka ayaa la xiri doonaa. Macluumaadka shakhsiyeed lama kaydiyo. Quad9 ayaa sidoo kale leh IPv6 DNS server oo sugan oo ah 2620: fe :: fe. Diiwaanka dadweynaha ee IPv4 ee aan amniga ahayn sidoo kale waxaa laga heli karaa Quad9 9.9.9.10 (2620: fe :: 10 ee IPv6), laakiin iyagu kuma talinayaan in loo isticmaalo sida qeybta labaad ee router ama kombiyuutarkaaga. Fiiri waxyaabo dheeraad ah oo ku jira Quad9 FAQ.

[5] DNS.WATCH ayaa sidoo kale leh IPv6 DNS server 2001: 1608: 10: 25 :: 1c04: b12f iyo 2001: 1608: 10: 25 :: 9249: d69b. Labada kooxood waxay ku yaalaan Jarmalka kuwaas oo saameyn ku yeelan kara waxqabadka haddii laga isticmaalo Maraykanka ama goobo kale oo fog.

[6] OpenDNS ayaa sidoo kale bixisa adeegyo DNS ah oo xannibaya waxyaabaha qaangaarka ah, oo loo yaqaan OpenDNS FamilyShield. Lambarrada DNS waxay yihiin 208.67.222.123 iyo 208.67.220.123 (oo lagu muujiyay halkan). Deeq bixinta ugu sareysa DNS ayaa sidoo kale la heli karaa, loo yaqaan OpenDNS Home VIP.

[7] Norton ConnectSafe oo lacag la'aan ah oo ka mid ah server-yada ku qoran liiska bogagga xayeysiinta ah ee martigelinta khayaanada, qorshaha phishing, iyo isugeynta, waxaana loo yaqaan " Policy 1" . U Isticmaal Siyaasadda 2 (199.85.126.20 iyo 199.85.127.20) si loo xakameeyo goobahaas oo lagu daray kuwa leh muuqaal fara badan. U Isticmaal Siyaasadda 3 (199.85.126.30 iyo 199.85.127.30) si loo xakameeyo dhammaan qaybaha hore ee la soo sheegay oo lagu daray "content mataan, dambi, daroogo, khamaar, rabshad" iyo in kale. U hubso inaad hubiso liiska waxyaalaha la xariira Siyaasadda 3 - waxaa jira dhowr mawduucyo muran leh oo halkaa ka jira oo aad ka heli karto si aad u wanaagsan.

[8] GreenTeamDNS "waxay ka kooban tahay tobanaan kumanaan website-yo khatar ah kuwaas oo ay ka mid yihiin kuwa khatarta ah, botnets, content-yo la xariiro, goobaha colaadaha / rabshadaha iyo sidoo kale xayeysiisyada iyo bogagga la xiriira daroogada" sida laga soo xigtay boggooda. Koontooyinka Premium waxay leeyihiin xakameyn badan.

[9] Iska diiwaangalinta halkan SafeDNS si aad u heshid fursadaha wax lagu qiyaaso ee dhowr meelood.

[10] Lambarada DNS ee halkan ku qoran ee loogu talagalay OpenNIC waa laba ka mid ah dad badan oo ku nool Mareykanka iyo adduunka oo dhan. Intii aad isticmaali laheyd server-yada OpenNIC DNS ee kor ku xusan, fiiri liistadooda dhamaystiran ee server-ka guud ee dadweynaha halkan iyo u isticmaal labo ka mid ah adiga kugu dhow ama, si ka sii wanaagsan, ha kuu sheegaan sida toos ah halkan. OpenNIC waxay sidoo kale bixisaa qaar ka mid ah serverada guud ee IPv6.

[11] FreeDNS waxay sheegeysaa in ay "marnaba galaan quwadaha DNS." Nidaamyadooda DNS lacag la'aan ah waxay ku yaalaan Austria.

[12] DNS kale ayaa sheega in ay adeegsadayaashooda DNS "xayiraan xayeysiisyada aan loo baahnayn" iyo in ay ku lug yeeshaan "wax su'aal ah lagama helin." Waad iska diiwaangelin kartaa boggooda saxeexan.

[13] Yandex's aasaasiga ah ee DNS lacag la'aan ah, oo kor ku qoran, ayaa sidoo kale laga heli karaa IPv6 at 2a02: 6b8 :: feed: 0ff iyo 2a02: 6b8: 0: 1 :: feed: 0ff. Laba xero oo dheeraad ah oo DNS ah ayaa la heli karaa. Ugu horreyn waa Amniga , oo ah 77.88.8.88 iyo 77.88.8.2, ama 2a02: 6b8 :: feed: xun iyo 2a02: 6b8: 0: 1 :: quudinta: xun, taas oo ka dhigan "goobaha cudurka qaba, goobaha been abuurka ah, iyo dharka." Qaybta labaad waa Qoyska , oo ah 77.88.8.7 iyo 77.88.8.3, ama 2a02: 6b8 :: feed: a11 iyo 2a02: 6b8: 0: 1 :: quudin: a11, kaas oo xannibaya wax kasta oo Amaanka ah, oo lagu daray "goobaha qaangaarka ah iyo qaangaarka xayeeysiin. "

[14] UncensoredDNS (horay censurfridns.dk) Adeegsadayaasha DNS ayaa calaamadeeynaya oo ay maamusho shakhsi gaar ah maalgeliya. Cinwaanka 91.239.100.100 waa wax laga soo qaaday meelo badan oo ka mid ah 89.233.43.71 mid ayaa ku yaal Kobanheegan, Denmark. Waxaad wax badan ka akhrisan kartaa halkan. IPv6 versions of labadooda DNS waxay sidoo kale diyaar yihiin 2001: 67c: 28a4 :: iyo 2a01: 3a0: 53: 53 ::, siday u kala horreeyaan.

[15] Duufaanta Korantada waxay leedahay sidoo kale adeegga dadweynaha ee IPv6 oo la heli karo: 2001: 470: 20 :: 2.

[16] puntCAT ayaa jir ahaan ku yaalla meel u dhow Barcelona, ​​Spain. Nidaamka IPv6 ee server-ka DNS lacag la'aan ah waa 2a00: 1508: 0: 4 :: 9.

[17] Neustar wuxuu leeyahay shan doorasho DNS ah. "Kalsooni iyo Darajo 1" (kor ku taxan) iyo "Reliability & Performance 2" waxaa loo maleynayaa in la dhiso waqtiyo la heli karo. "Nabadgalyada Hanjabaadda" (156.154.70.2, 156.154.71.2) waxay ka xayiraan xayawaanka, ransomware, spyware, iyo shabakadaha phishing. "Qalabka Qoyska" iyo "Secure Business" waa laba qof oo kale oo ka hortagaya bogagga shabakadaha leh noocyo gaar ah oo ka kooban. Adeeg kasta wuxuu sidoo kale ka heli karaa IPv6; eeg boggan dhammaan IPv4 iyo IPv6 cinwaanka, iyo sidoo kale in aad wax dheeraad ah ka ogaatid waxa xannibay labadii adeeg ee ugu dambeeyay.

[18] Sida laga soo xigtay website-ka Cloudfare, waxay dhisay 1.1.1.1 inay noqoto adeegga ugu dhakhsaha badan ee DNS ee adduunka oo waligoodna ma geli doono cinwaankaaga IP, marna ma iibin doono macluumaadkaaga, waligana uma isticmaali doono xogtaada si aad u beegsato xayeysiisyada. Waxay sidoo kale leeyihiin ururrada dadweynaha ee IPv6 oo laga heli karo 2606: 4700: 4700 :: 1111 iyo 2606: 4700: 4700 :: 1001.

[19] Sida laga soo xigtay website-ka Fourth Estate, "Ma kormeerno, diiwangelinno ama aan ku duubno kaydka waxqabad kasta oo adeegsadaha ah, mana beddelno, dib udhigin ama necbaan diiwaanada DNS." Adeegga DNS ee kor ku xusan waxaa martigeliyay Mareykanka. Waxay kaloo leeyihiin hal Switzerland oo ah 179.43.139.226 iyo mid kale oo Japan ah 45.32.36.36.