|
REPLY TO THREAD
|
|
Subject
|
EAS will target Internet and Phones next - Drudge
|
|
User Name
|
|
|
|
|
|
|
| Font color:
Font:
|
|
|
|
|
|
Original Message
|
[link to www.washingtonpost.com]
So it would seem if they were to "interrupt" the internet they would likely hijack DNS to provide URL resolution of any website to IP addresses of their specific servers. Here are a few tools to keep in mind if DNS gets hijacked:
Validate the world DNS is reporting back the same IP for a site:
[link to www.whatsmydns.net]
You may want to document and periodically validate the current IP of your favorite sites with tools such as nslookup or ping:
[link to www.kloth.net]
For windows users you can open a command prompt START->RUN and type "cmd"
From the command window you can simply type "ping <website url>" such as "ping www.godlikeproductions.com" and the IP address will appear in the output as such:
H:\>ping www.godlikeproductions.com
Pinging www.godlikeproductions.com [204.74.214.194] with 32 bytes of data:
Reply from 204.74.214.194: bytes=32 time=121ms TTL=42
Reply from 204.74.214.194: bytes=32 time=58ms TTL=42
Reply from 204.74.214.194: bytes=32 time=58ms TTL=42
Reply from 204.74.214.194: bytes=32 time=59ms TTL=42
Ping statistics for 204.74.214.194:
Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
Minimum = 58ms, Maximum = 121ms, Average = 74ms
H:\>
Lastly, if a combination of DNS AND Routing changes are done you can look at the route your computer is taking over the internet to get to the website with traceroute. In windows in the cmd prompt type "tracert <ip or url>" such as "tracert www.godlikeproductions.com"
Use Host tracker to validate computers around the world have access to a website:
[link to host-tracker.com]
Now the challenge is that if DNS is hit, these tool sites would also be down, and some webservers such as these are serving multiple sites from the same server IP address and use the HTML Host tag to determine the proper site to display. So if you were to just type the IP in the URL you would be displayed some default page. (Luckily godlikeproductions does not do this and the webpage is accessible via IP). In this case you would need to download an add-on to modify your HTML tags such as:
[link to addons.mozilla.org (secure)]
This will allow you to take the IP address of a server you learned above such as www.whatsmydns.net (67.208.112.208) or www.host-tracker.com (95.211.109.220) and modify your HTML GET request in the browser to provide the modified Host tag in the request. If you do not do this and just use the IP address in the URL you may not get the website you expected if they are utilizing these host tags to differentiate sites.
To use the modified HTTP headers mentioned above, install it then run it with TOOLS->Modify Headers. Then for select Action, specify MODIFY and in the first Box type "Host" in the second (Value) box type the specific URL for the IP you are trying to visit. i.e. if I wanted to go to webpage www.whatismydns.net I would enter this as the host. Then in firefox I can enter the URL as 67.208.112.208 and the site should work.
Note this process is a pain because you would have to change the host field for each site you would want to visit. Hopefully someone else knows of a tool to do this better assuming DNS is hijacked and we only have an IP address to access a site.
Hope this helps some people keep connected to information if DNS SHTF happens in the future
|
|
Pictures (click to insert)
|
 |  |  |  |  |  |  |  |  |  |  |  |  |  |  |  |  |  |  |  |  |  |  |  | | | Next Page >> |
|
