DNS Authoritative Server

wildest_jjk · 5 Oct 2013 at 19:11

Hey guys,

I am doing some security related stuff. Basically I am trying to get my head around DNS and am looking at some of the security weaknesses in terms of DDoS attacks.

Is it possible for a client PC to query an authoritative server directly? As in not going through a local DNS server.

Thanks

oldbag · 5 Oct 2013 at 19:18

http://stackoverflow.com/questions/6269138/accepted-queries-for-dns-root-server

wildest_jjk · 5 Oct 2013 at 19:38

Thanks for the response.

I'm not sure if that is answering what I am asking.

I want to know if its possible to send a query directly from a client PC to an authoritative name server.

Thanks

oldbag · 5 Oct 2013 at 19:44

how about this?

https://www.sans.org/reading-room/w...-991?show=secure-root-dns-servers-991&cat=dns

PistolPete · 6 Oct 2013 at 11:37

wildest_jjk said:
Is it possible for a client PC to query an authoritative server directly? As in not going through a local DNS server.

Thanks

Short answer, yes.

Longer answer, yes - assuming that the client can identify what is the authoritative server and is able to access said server to query it (firewall and routing wise)