DNS/毒盛/移転インジェクション/確認方法/unboundについて、ここに記述してください。
Ubuntu 16.04LTS上の標準Unbound 1.5.8 (標準Option)
キャッシュに関連レコードが存在しない場合には、 最初の返答だけは別に取り扱う必要がありそうだ。
$ dig d1.flip.e-ontap.com @127.0.0.2 ; <<>> DiG 9.12.0 <<>> d1.flip.e-ontap.com @127.0.0.2 ;; global options: +cmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 23528 ;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 1 ;; OPT PSEUDOSECTION: ; EDNS: version: 0, flags:; udp: 1220 ;; QUESTION SECTION: ;d1.flip.e-ontap.com. IN A ;; ANSWER SECTION: d1.flip.e-ontap.com. 300 IN A 150.42.6.1 ;; Query time: 52 msec ;; SERVER: 127.0.0.2#53(127.0.0.2) ;; WHEN: Sat Apr 07 09:46:18 JST 2018 ;; MSG SIZE rcvd: 64
tmaeno@u16:~$ dig -t ns flip.e-ontap.com @127.0.0.2 ; <<>> DiG 9.12.0 <<>> -t ns flip.e-ontap.com @127.0.0.2 ;; global options: +cmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 55064 ;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 1 ;; OPT PSEUDOSECTION: ; EDNS: version: 0, flags:; udp: 1220 ;; QUESTION SECTION: ;flip.e-ontap.com. IN NS ;; ANSWER SECTION: flip.e-ontap.com. 3600 IN NS ns.flip.internot.jp. ;; Query time: 133 msec ;; SERVER: 127.0.0.2#53(127.0.0.2) ;; WHEN: Sat Apr 07 09:46:43 JST 2018 ;; MSG SIZE rcvd: 78
1. はじまり
tmaeno@u16:~$ dig d2.flip.e-ontap.com @127.0.0.2 ; <<>> DiG 9.12.0 <<>> d2.flip.e-ontap.com @127.0.0.2 ;; global options: +cmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 17047 ;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 1 ;; OPT PSEUDOSECTION: ; EDNS: version: 0, flags:; udp: 1220 ;; QUESTION SECTION: ;d2.flip.e-ontap.com. IN A ;; ANSWER SECTION: d2.flip.e-ontap.com. 300 IN A 150.42.6.5 ;; Query time: 24 msec ;; SERVER: 127.0.0.2#53(127.0.0.2) ;; WHEN: Sat Apr 07 09:47:12 JST 2018 ;; MSG SIZE rcvd: 64 tmaeno@u16:~$ dig d3.flip.e-ontap.com @127.0.0.2 ; <<>> DiG 9.12.0 <<>> d3.flip.e-ontap.com @127.0.0.2 ;; global options: +cmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 13962 ;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 1 ;; OPT PSEUDOSECTION: ; EDNS: version: 0, flags:; udp: 1220 ;; QUESTION SECTION: ;d3.flip.e-ontap.com. IN A ;; ANSWER SECTION: d3.flip.e-ontap.com. 300 IN A 150.42.6.5 ;; Query time: 22 msec ;; SERVER: 127.0.0.2#53(127.0.0.2) ;; WHEN: Sat Apr 07 09:47:35 JST 2018 ;; MSG SIZE rcvd: 64
2. キャッシュは書き直されるか
$ dig d7.flip.e-ontap.com @127.0.0.2 ; <<>> DiG 9.12.0 <<>> d7.flip.e-ontap.com @127.0.0.2 ;; global options: +cmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 37118 ;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 1 ;; OPT PSEUDOSECTION: ; EDNS: version: 0, flags:; udp: 1220 ;; QUESTION SECTION: ;d7.flip.e-ontap.com. IN A ;; ANSWER SECTION: d7.flip.e-ontap.com. 300 IN A 150.42.6.5 ;; Query time: 22 msec ;; SERVER: 127.0.0.2#53(127.0.0.2) ;; WHEN: Sat Apr 07 10:03:17 JST 2018 ;; MSG SIZE rcvd: 64 tmaeno@u16:~$ dig -t ns flip.e-ontap.com @127.0.0.2 ; <<>> DiG 9.12.0 <<>> -t ns flip.e-ontap.com @127.0.0.2 ;; global options: +cmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 53151 ;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 1 ;; OPT PSEUDOSECTION: ; EDNS: version: 0, flags:; udp: 1220 ;; QUESTION SECTION: ;flip.e-ontap.com. IN NS ;; ANSWER SECTION: flip.e-ontap.com. 2577 IN NS ns.flip.internot.jp. ;; Query time: 0 msec ;; SERVER: 127.0.0.2#53(127.0.0.2) ;; WHEN: Sat Apr 07 10:03:46 JST 2018 ;; MSG SIZE rcvd: 78
3. 上書きされない
$ dig d9.flip.e-ontap.com @127.0.0.2 ; <<>> DiG 9.12.0 <<>> d9.flip.e-ontap.com @127.0.0.2 ;; global options: +cmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 7833 ;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 1 ;; OPT PSEUDOSECTION: ; EDNS: version: 0, flags:; udp: 1220 ;; QUESTION SECTION: ;d9.flip.e-ontap.com. IN A ;; ANSWER SECTION: d9.flip.e-ontap.com. 300 IN A 150.42.6.5 ;; Query time: 23 msec ;; SERVER: 127.0.0.2#53(127.0.0.2) ;; WHEN: Sat Apr 07 10:32:35 JST 2018 ;; MSG SIZE rcvd: 64 tmaeno@u16:~$ dig -t ns flip.e-ontap.com @127.0.0.2 ; <<>> DiG 9.12.0 <<>> -t ns flip.e-ontap.com @127.0.0.2 ;; global options: +cmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 35772 ;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 1 ;; OPT PSEUDOSECTION: ; EDNS: version: 0, flags:; udp: 1220 ;; QUESTION SECTION: ;flip.e-ontap.com. IN NS ;; ANSWER SECTION: flip.e-ontap.com. 842 IN NS ns.flip.internot.jp. ;; Query time: 0 msec ;; SERVER: 127.0.0.2#53(127.0.0.2) ;; WHEN: Sat Apr 07 10:32:41 JST 2018 ;; MSG SIZE rcvd: 78