310 likes | 387 Views
DNS : The Domain Name System. Introduction - Problem. Computers are used to work with numbers Humans are used to work with names ==> IP addresses are NUMBERS :-/. ?. 1011011011101110110110. Introduction. Hosts.txt Distributed Database Mapping between IP-address and Hostnames
E N D
Introduction - Problem • Computers are used to work with numbers • Humans are used to work with names • ==> IP addresses are NUMBERS :-/ ? 1011011011101110110110
Introduction • Hosts.txt • Distributed Database • Mapping between IP-address and Hostnames • Mail routing • Client-Server • Resolver - Name servers
Naming convention • Hierarchical • www.groept.be • wwwsnmp.cs.utwente.nl • [0..9,a..z,A..Z,-] Not case sensitive Geography . domain No Relation ? nl utwente hostname cs IP Subnet wwwsnmp
arpa com edu gov int mil net org be nl de in-addr monsanto groept 193 ea 58 9 1 DNS Tree Root . TLD generic domains country domains 1.9.58.193.in-addr.arpa. FQDN
Basics • Delegation by zone • Primary Name Server • Root Name Server
Internet Forward Lookup www.groept.be Connection initiated from web-browser or other service to request the name. RESOLVER DNS Server
Internet Forward Lookup www.groept.be Connection initiated from web-browser or other service to request the ip address. RESOLVER DNS replies with ip address DNS Server
Internet Forward Lookup www.groept.be Connection initiated from web-browser or other service to request the ip address. RESOLVER DNS replies with ip address Web browser requests page using the ip address DNS Server
Internet Forward Lookup www.groept.be Connection initiated from web-browser or other service to request the ip address. RESOLVER DNS replies with ip address Web browser requests page using the ip address Web server replies with webpage DNS Server
Internet Lookup to www.cisco.com Root name server Resolver issues a recursive lookup Local nameserver issues an itterative lookup to root name server for .com .com. .cisco.com. itterative www.cisco.com groept.be. recursive
Internet Lookup to www.cisco.com Root name server Resolver issues a recursive lookup Local nameserver issues an itterative lookup to root name server for .com .com. .cisco.com. itterative www.cisco.com groept.be. recursive
Internet Lookup to www.cisco.com Root name server Resolver issues a recursive lookup Local nameserver issues an itterative lookup to root name server for .com .com. .cisco.com. itterative www.cisco.com groept.be. recursive
Internet Lookup to www.cisco.com Root name server Resolver issues a recursive lookup Local nameserver issues an itterative lookup to root name server for .com Local nameserver answers with the IP address .com. .cisco.com. itterative www.cisco.com groept.be. recursive
Internet Lookup to www.cisco.com Root name server Resolver issues a recursive lookup Local nameserver issues an itterative lookup to root name server for .com Local nameserver answers with the IP address Browser request the page using the IP address .com. .cisco.com. itterative www.cisco.com groept.be. recursive
Internet Sequential Lookup to www.cisco.com Root name server Second machine issues the same recursive lookup .com. .cisco.com. www.cisco.com groept.be. recursive
Internet Sequential Lookup to www.cisco.com Root name server Second machine issues the same recursive lookup Local nameserver provides a cached answer .com. .cisco.com. www.cisco.com groept.be. recursive
Internet Sequential Lookup to www.cisco.com Root name server Second machine issues the same recursive lookup Local nameserver provides a cached answer Browser request the page using the IP address .com. .cisco.com. www.cisco.com groept.be. recursive
Name server types • Root name server • Primary name server • Secondary name server • Caching-only name server • Slave servers – forwarding server
NSLOOKUP – Your tool ! • Forward Lookup • nslookup gateway.pharmacia.com • Name: gateway.pharmacia.com • Address: 193.235.243.3 • Reverse Lookup • nslookup 193.235.243.3 • Name: gateway.pharmacia.com • Address: 193.235.243.3
New developments • DNS dynamic updates using Secure DNS • Prompt notification of zone changes • Incremental zone transfers
Resource records • SOA-record • NS-record • A-record • CNAME-record • HINFO-record • PTR-record • MX-record
SOA-record # nslookup Default Server: bebrump001.bebru.eu.pnu.com Address: 10.240.72.65 > set type=SOA > monsanto.com Server: bebrump001.bebru.eu.pnu.com Address: 10.240.72.65 Non-authoritative answer: monsanto.com origin = srvsn0.monsanto.com mail addr = hostmaster.srvsn0.monsanto.com serial = 2001103098 refresh = 3600 (1H) retry = 1800 (30M) expire = 432000 (5D) minimum ttl = 86400 (1D) Authoritative answers can be found from: srvsn0.monsanto.com internet address = 164.144.230.67
NS-Record > set type=NS > groept.be Server: bebrump001.bebru.eu.pnu.com Address: 10.240.72.65 Non-authoritative answer: groept.be nameserver = mail.groept.be groept.be nameserver = ns.eu.net groept.be nameserver = dns.eunet.be Authoritative answers can be found from: mail.groept.be internet address = 193.75.206.83 ns.eu.net internet address = 192.16.202.11 dns.eunet.be internet address = 193.74.208.137 >
www.groept.be IN A 193.75.206.93 A-record > set type=A > www.groept.be Server: bebrump001.bebru.eu.pnu.com Address: 10.240.72.65 Name: www.groept.be Address: 193.75.206.93 >
<bijnaam> IN A <echte naam> chekov.Belgium.EU.net IN A 193.74.208.163 relay.eunet.be IN CNAME chekov.Belgium.EU.net CNAME-record > relay.eunet.be Server: bebrump001.bebru.eu.pnu.com Address: 10.240.72.65 Name: relay.eunet.be Addresses: 193.74.208.163, 193.74.22.138, 193.74.208.147
chekov.Belgium.EU.net IN HINFO “SUN E 450” “Solaris” HINFO-record
137.208.74.193.in-addr.arpa IN PTR jupiter.Belgium.EU.net PTR-record > set type=PTR > 193.74.208.137 Server: bebrump001.bebru.eu.pnu.com Address: 10.240.72.65 137.208.74.193.in-addr.arpa name = jupiter.Belgium.EU.net 208.74.193.in-addr.arpa nameserver = dns.eunet.be 208.74.193.in-addr.arpa nameserver = ns.EU.net dns.eunet.be internet address = 193.74.208.137 >
MX-record pharmacia.com IN MX 100 gateway.pharmacia.com pharmacia.com IN MX 100 ns3.pharmacia.com pharmacia.com IN MX 200 gateway3.pharmacia.com > set type=MX > pharmacia.com Server: bebrump001.bebru.eu.pnu.com Address: 10.240.72.65 Non-authoritative answer: pharmacia.com preference = 100, mail exchanger = gateway.pharmacia.com pharmacia.com preference = 200, mail exchanger = gateway3.pharmacia.com pharmacia.com preference = 100, mail exchanger = ns3.pharmacia.com Authoritative answers can be found from: gateway.pharmacia.com internet address = 193.235.243.3 gateway3.pharmacia.com internet address = 193.235.243.8 >
DNS Message Format 0 15 16 31 flags QR opcode AA TC RD RA zero rcode identification number of questions number of answer RRs 12 bytes number of authority RRs number of additional RRs questions answers (variable number of resource records) authority (variable number of resource records) additional information (variable number of resource records)
Question Portion of DNS Query Message 0 15 16 31 query name query type query class