NEW350+ rooms now have a live terminal, so you can learn by typing the commands, right in your browser.Learn in a live terminal. 350+ rooms.Try a lab♥ Codelivly is 100% free, no paywall. If it helped you, chip in to keep it running.100% free. Help keep it so.Support us
[>_] ROOM · Networking
DNS Administration & Security
Master DNS architecture, record types, zone transfers, and learn how to secure DNS against reconnaissance and tunneling attacks.
Room tasks
1What Is DNS and Why Does It Matter
2DNS Record Types & Zone Files
3Configuring an Authoritative DNS Server
4DNS Forwarding & Caching
5Guided Lab: Deploying and Troubleshooting a DNS Server
Frequently Asked Questions
What is a DNS zone transfer?
A zone transfer copies a DNS zone's records from one server to another. If unrestricted, attackers can use it to map an organisation's hosts, so it should be limited to trusted servers.
What does DNSSEC do?
DNSSEC adds digital signatures to DNS records so resolvers can verify they are authentic and unmodified. It protects against spoofing but does not encrypt queries.
How can DNS be abused by attackers?
Attackers use DNS for reconnaissance, command and control and data tunneling. This free intermediate Codelivly room covers administration and the defences that spot and stop that misuse.