After the contaminated DNS how to solve?

  For DNS poisoning, usually in addition to using a proxy server outside, and there is no other way. But with our understanding of DNS poisoning, or you can do it without a proxy server DNS can solve the problem of pollution, and thus had access to some sites can not be accessed without using a proxy server.
  Of course, this does not solve all the problems, when the DNS itself is not caused by pollution can not access some websites, or need to use a proxy server to access.
  DNS packets are not contaminated on the router through the packet network, but in which the bypass generated. Therefore, DNS poisoning and can not prevent the correct DNS resolution results are returned, but due to high packet bypass generated abroad sent back faster than DNS server sends back, the first operating system considers a received packet is to return results, thereby Thereafter the received packet is ignored, so that contamination DNS succeed.
  The DNS IP pollution contamination of certain countries within a period of time is fixed, so you can ignore the return result is a packet of these IP addresses, DNS directly address the problem of pollution.
  DNS Pollution Solution
  1, using various proxy SSH encryption, encrypted remote DNS resolution agent in.
  2, modify the hosts file, the operating system permissions priority higher than the DNS Hosts file servers, operating systems when accessing a domain name, will first test HOSTS file, and then query the DNS server. You can add DNS address contamination in the hosts to resolve DNS pollution and DNS hijacking.
  3, by some programming process, you can simply ignore the result is false packet IP address, DNS directly address the problem of pollution.
  4. If you are Firefoxonly, directly open the Firefox remote DNS resolution on the line. In the address bar:
  the About: config
  found network.proxy.socks_remote_dns a change true.

Guess you like

Origin blog.51cto.com/14498873/2434758