How to DDOS a federal wiretap Researchers at the University of Pennsylvania say they've discovered a way to circumvent the networking technology used by law enforcement to tap phone lines in the U.S. DNS problem linked to DDoS attacks gets worse Internet security experts say that misconfigured DSL and cable modems are worsening a well-known problem with the Internet's DNS (domain name system), making it easier for hackers to launch distributed denial-of-service (DDoS) attacks against their victims. With botnets everywhere, DDoS attacks get cheaper Cyber-crime just doesn't pay like it used to. Boise State ditches Cisco DNS Boise State University, the largest university in Idaho, has replaced its aging Cisco Network Registrar software with appliances from BlueCat Networks that it says are easier to manage and less expensive to operate for Domain Name System and Dynamic Host Configuration Protocol services. Secure Updates in Server 2008 DNS One of the big benefits of combining AD and DNS on the same system using Active Directory Integrated (ADI) zones is that you can specify that dynamic updates should be "secure." (This operation is accomplished either through the DNS administrative console or the DNSCMD command line tool. You're given the choice in the new zone wizard but you can always change it later on.) Windows Server 2008 R2 supports DNS Security Extensions As promised, the latest version of Windows Server 2008 R2 is the first Windows Server to fully support DNSSEC. DNSSEC is a security protocol that helps to verify that a Web address hasn't been hacked and redirected to a pretender. Better still, Windows 7 also supports DNSSEC, which Microsoft claims is a first among client operating systems. Active Directory Integrated DNS Zones In my last posting I mentioned that it's not necessarily a good idea to always separate AD DS (Active Directory Domain Services) and DNS on different systems. Let's now take a closer look at why that might be the case. If you run DNS on domain controllers, you have the opportunity to use something called Active Directory Integrated zones, or ADI zones. In classical DNS, the zone information... Active Directory and DNS on the Same System I've found the AD/DNS relationship to be one of the least understood aspects of Active Directory, and the literature is full of misinformation and half-truths. I was surprised to realize that in this blog, we've never taken a closer look at how DNS supports the inner workings of Active Directory in Windows Server 2008 and Server 2003. So, to right that wrong, the next few entries will do just that.... VeriSign bolsters security for .com, .net sites VeriSign says it will support DNS Security Extensions, dubbed DNSSEC, in the .net and .com top-level domains by March 2011. November giveaways Cisco Subnet is giving away free books on VMware vSphere security. Microsoft Subnet is giving away training from New Horizons and free books on Exchange Server 2010. Google Subnet is giving away free books on Android app development. Entry forms can be found on the main contest page. Trivia answers are revealed on each main Subnet page. Network World on Twitter? You bet we are |
No comments:
Post a Comment