Recursive DNS resolver for Windows using query repetition and other techniques to defeat spoofing attacks, with basic authoritative functionality in addition. Coded in C#.
Be the first to post a text review of GbDns. Rate and review a project by clicking thumbs up or thumbs down in the right column.
Recursive DNS resolver for Windows using query repetition and other techniques to defeat spoofing attacks, with basic authoritative functionality in addition. Coded in C#. GbDns is intended to be a comprehensive solution to DNS spoofing. The CERT vulnerability note, VU#800113 explains that you should "Run a local DNS cache". Also, it notes that NAT devices "can reduce source port randomness", which means that source port randomization cannot be relied on for security. Instead of relying on source port randomization, GbDns defeats spoofing by sending the query two (or more) times, and checks the responses agree ( this is an over-simplification, but sufficient to understand the principle ). To the best of my knowledge, GbDns is the only DNS resolver that does this, and therefore appears to be the only secure solution to DNS resolution. GbDns runs as a local recursive cache, and only takes a minute or two to install.
See http://www.george-barwood.pwp.blueyonder.co.uk/DnsServer/changes.htm for change history prior to sourceforge release
See http://www.george-barwood.pwp.blueyonder.co.uk/DnsServer/changes.htm for change history prior to sourceforge release
See http://www.george-barwood.pwp.blueyonder.co.uk/DnsServer/changes.htm for change history prior to sourceforge release
Be the first person to add a text review.
Copyright © 2009 Geeknet, Inc. All rights reserved. Terms of Use
Thanks for your rating!
Would you also like to write a review?