无法调查中美之间的DNS中毒事件
我很想知道不同国家/地区对政治网站的 DNS 请求有何不同。
我需要知道如何向远程计算机（例如在中国的计算机）发送 DNS 查询。 然后，我想将结果与美国进行比较。 该实验的目的是获得有关 DNS 中毒概念的实际经验。 我觉得我的讲座很理论化。
如何比较中国和美国之间的 DNS 请求，以便我可以调查 DNS 中毒？
I am interested to know how the DNS requests to political sites differ in different countries.
I need to know how I can send a DNS query to a remote computer, let say, in China. Then, I want to compare the results to US. The goal of the experiment is to get a hand-on experience on the concept about DNS poison. I feel my lectures so theoretical.
How can you compare DNS requests between China and US, such that I can investigate DNS poisoning?
如果你对这篇内容有疑问，欢迎到本站社区发帖提问 参与讨论，获取更多帮助，或者扫码二维码加入 Web 技术交流群。
绑定邮箱获取回复消息
由于您还没有绑定你的真实邮箱，如果其他用户或者作者回复了您的评论，将不能在第一时间通知您！
发布评论
评论（4）
这在一定程度上取决于查询的更改方式。 如果服务器根据您所在的位置给出不同的结果，那么直接询问将没有任何用处。 如果您的查询被中间的缓存服务器毒害，这些方法可能会有所帮助。
如果您在世界不同地区拥有 shell 帐户，则可以执行简单的测试。
我使用的是“dig”，它在大多数 *nix 系统上都可用。 如果您运行的是 Windows，您可能需要在此 DNS 工具列表中搜索替代工具
查找负责的 DNS 服务器
挖掘 ns domain-in-question.com @the.dns.server.you.want.to.use获取主机名的 IP 地址
挖掘一个 host.domain-in-question.com @the.dns.server.you.want.to.use（您可以跳过 @.. 部分以在当前服务器上运行）
我建议从世界不同地区尝试这两种方法，看看服务器本身是否给出不同的结果，或者途中的缓存服务器是否被中毒。
另外，搜索“如何毒害 dns”给了我一些实际结果。
This depends a bit on how the queries are being altered. If the server is giving different results based on your locality, then asking it directly will not be of any use. If you're queries are being poisoned by a caching server in between, these methods might help.
If you have shell accounts in different parts of the world you can perform a simple test.
I'm using 'dig', which is available on most *nix systems. If you're running Windows you might want to search for an alternative in this list of DNS tools
To find the responsible DNS servers
dig ns domain-in-question.com @the.dns.server.you.want.to.useTo get the IP addres for the hostname
dig a host.domain-in-question.com @the.dns.server.you.want.to.use(You can skip the @.. part to run with your current server)
I recommend trying both of these from different parts of the world to see if the server itself is giving different results or if the caching servers on the way there are being poisoned.
Also, searching for 'how to poison dns' gave me a number of practical results.
您可以只使用 nslookup（
server命令让您指定要询问的 DNS 服务器）You can just use nslookup (the
servercommand lets you specify the DNS server to ask)试试这个网络工具：
http://www.kloth.net/services/dig.php
至于了解DNS中毒，每台计算机都有信任哪个DNS服务器的设置等等。 如果链中的其中一个受到损害，下游的每台计算机都将收到不良信息。
Try this web tool:
http://www.kloth.net/services/dig.php
As for learning about DNS poisoning, every computer has settings for which DNS server to trust, and so on. If one of them in a chain is compromised, every computer downstream will receive bad information.
如果远程服务器配置正确，它们将不会让您询问它们。
任何递归解析器都应配置为仅向其打算服务的客户端提供答案。
If the remote servers are correctly configured, they won't let you interrogate them.
Any recursive resolver should be configured to only provide answers to the clients its intended to serve.