홈주소창 로그인 회원가입 내 한글주소 관리 고객만족센터 토론게시판 사이트맵 고객 지킴이
홈 / DNS컨설팅 / 묻고 답하기
 
DNSC 소개 및 특징
DNSC 서비스 안내
nBIND(BIND) 소개
nBIND(BIND) 다운로드
묻고 답하기
DNS(네트워크) 최근 소식
문의하기
자주 묻는 질문과 답변
고객 문의 게시판
DNS��� 愿��젴�맂 沅곴툑�븳 �젏�뱾�쓣 吏덈Ц�빐 二쇱꽭�슂. �떞�떦�옄媛� 利됱떆 �떟蹂��빐 �뱶由ш쿋�뒿�땲�떎.

��� DNS��� 愿��젴�맂 �궡�슜�씠 �븘�땺 寃쎌슦 �궘�젣�맆 �닔 �엳�뒿�땲�떎.
 
 
제 목  RE : cache poisoning ??
글쓴이   �넚醫낆닔 조회 4758
게시일자   2009-03-31 �삤�쟾 11:06:30
 
�떟蹂��뱶由쎈땲�떎.

DNS Cache Poisoning


�뼚 DNS �쓽 Cache Poisoning 痍⑥빟�젏
DNS �봽濡쒗넗肄쒖뿉 Cache Poisoning 痍⑥빟�젏�쑝濡� 怨듦꺽�옄�뒗 痍⑥빟�븳 DNS 瑜� �궗�슜�븯�뒗 �떆�뒪�뀥�뿉 議곗옉�맂 DNS 荑쇰━瑜� �쟾�넚�븯�뿬 罹먯돩�쓽 �젙蹂대�� 蹂�寃�, �젙�긽�쟻�씤 �궗�씠�듃�뿉 �젒�냽 �떆 �떎瑜� �궗�씠�듃�쓽 ip濡� 蹂�議곗떆�궎�뒗 諛⑸쾿�엯�땲�떎.
�뼚 ����긽
DNS �봽濡쒗넗肄쒖씠 �쟻�슜�맂 �냼�봽�듃�썾�뼱
�뼚 痍⑥빟�젏 �궡�슜
怨듦꺽�옄�뒗 議곗옉�맂 DNS 荑쇰━瑜� �떎�웾�쑝濡� �쟾�떖�븯�뿬 DNS 罹먯돩�꽌踰꾩쓽 �궡�슜�쓣 �엫�쓽濡� 蹂�寃쏀븷 �닔 �엳�뒿�땲�떎. �슂泥��븳 二쇱냼�쓽 �썝�옒 二쇱냼媛� �븘�땶 怨듦꺽�옄媛� 吏��젙�븳 二쇱냼濡� 蹂�寃쏀븯�뿬 罹먯돩瑜� 蹂�寃쏀븷 �닔 �엳�쑝誘�濡� �븙�꽦肄붾뱶媛� �꽕移섎맂 �엫�쓽�쓽 二쇱냼 �벑�쑝濡� 蹂�寃쎌씠 媛��뒫�빀�땲�떎.

�씠 痍⑥빟�젏��� �듅�젙 DNS �냼�봽�듃�썾�뼱�뿉 �븳�젙�릺吏� �븡怨� DNS �봽濡쒗넗肄쒖쓣 �뵲瑜대뒗 紐⑤뱺 �냼�봽�듃�썾�뼱�뿉 �쁺�뼢�쓣 以띾땲�떎. DNS(Domain Name System)�뒗 �씤�꽣�꽬 �씤�봽�씪�쓽 以묒슂�븳 �슂�냼濡� �샇�뒪�듃 �씠由꾩쓣 IP 二쇱냼濡� 蹂�寃쏀빐 二쇨굅�굹 �삉�뒗 諛섎���쓽 �뿭�븷�쓣 �닔�뻾�빀�땲�떎. 怨듦꺽�옄�뒗 議곗옉�맂 DNS �젙蹂대�� �쟾�떖�븯�뿬 議곗옉�맂 DNS �젙蹂닿�� 罹먯돩 �꽕�엫�꽌踰꾩뿉 湲곕줉�맆 �닔 �엳�룄濡� �빀�땲�떎. �씠 怨듦꺽湲곕쾿��� Cache Poisoning �쑝濡� 遺덈━硫� �떎�쓬怨� 媛숈�� 寃쎌슦�뿉 �씠踰� 痍⑥빟�젏 �쁺�뼢�쓣 諛쏆쓣 �닔 �엳�뒿�땲�떎.
DNS �봽濡쒗넗肄쒖�� Transaction ID �씪�뒗 16鍮꾪듃�쓽 �븘�뱶瑜� 媛�吏�怨� �엳�뒿�땲�떎. 荑쇰━ �슂泥��떆 �씠 ID 踰덊샇媛� �엫�쓽濡� �꽑�깮�릺�뼱吏��뒗 寃껋쓣 �삁痢≫븯�뿬 罹먯돩 議곗옉�씠 媛��뒫�븯怨�, ID 媛믪�� 32,768 媛쒖쓽 媛믪씠 議댁옱�븯�뿬 異붿륫�븯湲� �옒�뱾吏�留� 痍⑥빟�젏�쓣 �궡�룷�븳 DNS �쓽 寃쎌슦�뒗 �씠蹂대떎 �뜑 �옉��� 踰덊샇濡� �삁痢≫븯�뿬 怨듦꺽�떆�룄 媛� 媛��뒫�빐 吏묐땲�떎.

�삉�븳, �슂泥��맂 荑쇰━�뿉 ����빐 �쓳�떟�릺�뒗 荑쇰━�뒗 媛숈�� �냼�뒪�룷�듃 踰덊샇瑜� �궗�슜�븯�뿬 �뒪�뫖�븨�씠 �뜑�슧 �돺寃� 媛��뒫�빐 吏묐땲�떎. �슂泥��븳 DNS 荑쇰━�뿉 ����빐 �쓳�떟�쓣 二쇰뒗寃쎌슦 異쒕컻吏���� 紐⑹쟻吏� �룷�듃媛� �룞�씪�븯怨� �듃�옖�젥�뀡 ID 源뚯�� 媛숈�� 寃쎌슦�뒗, �삱諛붾Ⅸ 寃껋쑝濡� �뙋�떒�릺�뼱 罹먯돩�뿉 �옒紐삳맂 �젙蹂대�� 湲곕줉�븷 �닔 �엳寃� �맗�땲�떎.
�뼚 痍⑥빟�젏 �솗�씤諛⑸쾿
1. 吏덉쓽瑜� �씠�슜�븳 �솗�씤
- �떎�쓬 紐낅졊 �떎�뻾
$dig @localhost +short porttest.dns-oarc.net TXT �삉�뒗 �븘�옒��� 媛숈씠 IP濡� 議고쉶
$dig @�빐�떦�꽌踰껱P +short porttest.dns-oarc.net TXT

- 痍⑥빟�븳 寃쎌슦 �쓳�떟 �궡�슜
porttest.y.x.w.v.u.t.s.r.q.p.o.n.m.l.k.j.i.h.g.f.e.d.c.b.a.pt.dns-oarc.net.
"�빐�떦�꽌踰껱P is POOR: 26 queries in 3.6 seconds from 1 ports with std dev0"
- 痍⑥빟�븯吏� �븡���寃쎌슦 DNS �솗�씤寃곌낵
porttest.z.y.x.w.v.u.t.s.r.q.p.o.n.m.l.k.j.i.h.g.f.e.d.c.b.a.pt.dns-oarc.net.
"�빐�떦�꽌踰� IP is GOOD: 26 queries in 2.0 seconds from 26 ports with std dev 17685.51"

2. �쎒�댋�쓣 �씠�슜�븳 �솗�씤
- https://www.dns-oarc.net/oarc/services/dnsentropy �젒�냽 �썑, TEST MY DNS �겢由�





�뼚 �뙣移섎갑踰�
- �뾽洹몃젅�씠�뱶
罹먯떆 DNS �꽌踰꾨줈 �궗�슜�릺�뒗 �떆�뒪�뀥�쓣 �슫�쁺 以묒씠�씪硫�, �뙣移섍�� �맂 踰꾩쟾�쑝濡� �뾽洹몃젅�씠�뱶 �빀�땲�떎.�뙣移섎쾭�쟾: BIND 9.3.5-p1, BIND 9.4.2-p1, BIND 9.5.0-p1 �씠�긽
- �뾽洹몃젅�씠�뱶 �쇅�뿉 recursive query �젣�븳

$ vi /etc/named.conf
acl xxx { 127.0.0.1; �빐�떦�꽌踰껱P; };
options {
version "unknown";
allow-recursion { xxx; };
};

acl 由ъ뒪�듃�뿉 �엳�뒗 IP�뿉留� recursive query �뿀�슜�븯�룄濡� �꽕�젙�빀�땲�떎.

�뼚 windows OS �궗�슜�옄�쓽 寃쎌슦 �븘�옒 URL�쓣 李몄“�븯�뿬 �빐�떦 DNS痍⑥빟�젏 �뙣移섎�� �뾽洹몃젅�씠�뱶 �븯�떆湲� 諛붾엻�땲�떎.
- 留덉씠�겕濡쒖냼�봽�듃
http://www.microsoft.com/korea/technet/security/bulletin/ms08-037.mspx

�뼚 �뼵湲됰릺吏� �븡��� �냼�봽�듃�썾�뼱�뒗 �궗�슜�븯�뒗 �빐�떦 DNS�쓽 �솗�씤 �썑 痍⑥빟�젏 �뿬遺�瑜� 諛섎뱶�떆 �솗�씤�븷 寃껋쓣 沅뚭퀬�빀�땲�떎.


�뼚 李멸퀬�젙蹂�
- CVE �젙蹂� : CVE-2008-1447
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1447
- US-CERT 痍⑥빟�젏 �끂�듃, VU#800113
http://www.kb.cert.org/vuls/id/800113
-李멸퀬 �씤�꽣�꽬移⑦빐�궗怨좊���쓳�꽱�꽣



=========================== �썝蹂멸�� ===========================
DNS瑜� 怨듬���븯�떎 蹂대땲 "cache poisoning" �씠�씪�뒗 留먯씠 �굹�삤�뜕�뜲..
cache poisoning 萸먭���슂??
 
 

   cache poisoning ??  2009-03-30 罹먯떆由�
       RE : cache poisoning ??  2009-03-31 蹂��긽泥�
       RE : cache poisoning ??  2009-03-31 �넚醫낆닔

 
이전글   named.ca �궘�젣 
다음글   [珥덈낫] �룷�썙�뵫 



한국어EnglishJapanese 제휴제안 인재채용 서비스 약관 및 정책 개인정보처리방침 책임한계 및 법적 고지 이메일무단수집 거부
대표전화 : 02-3665-0123   고객상담 : 02-2165-3000   FAX : 02-2671-5613   e메일 : 고객상담@넷피아콥
개인정보 악용 신고 : reportabuse@ibi.net Copyright (C) 1995 - 2025 Netpia, Inc. All rights reserved.