无污染 DNS 分享 - V2EX
V2EX = way to explore
V2EX 是一个关于分享和探索的地方
现在注册
已注册用户请  登录
SaoHangBaBa
V2EX span class="chevron">   DNS

无污染 DNS 分享

  •  
  •   SaoHangBaBa 2018-03-02 15:24:34 +08:00 18127 次点击
    这是一个创建于 2830 天前的主题,其中的信息可能已经有所发展或是发生改变。

    缓存.png tcp.png

    24 条回复    2018-03-15 22:25:40 +08:00
    bclerdx
        1
    bclerdx  
       2018-03-02 17:11:35 +08:00
    加个 PTR 记录吧。
    ixinshang
        2
    ixinshang  
       2018-03-02 17:13:19 +08:00 via Android
    一直想自己弄一个 一直没弄好 请问用的是什么方案
    lisonfan
        3
    lisonfan  
       2018-03-02 17:30:22 +08:00
    @ixinshang #2
    推荐你一个 Pcap_DNSProxy
    在 Gayhub 搜就能搜到,第一个
    v2register
        4
    v2register  
       2018-03-02 18:16:55 +08:00
    AAAAAAAAAAAAAAAA
        5
    AAAAAAAAAAAAAAAA  
       2018-03-02 19:45:08 +08:00
    感谢,一直想自己搭一个来着,先用兄弟你的试试。
    SaoHangBaBa
        6
    SaoHangBaBa  
    OP
       2018-03-02 21:39:19 +08:00
    Loyalsoldier
        7
    Loyalsoldier  
       2018-03-02 21:57:30 +08:00
    技术上,DNS 怎么做到不被污染?一直没搞懂。通过 TCP 来请求数据?
    sutra
        8
    sutra  
       2018-03-02 22:08:58 +08:00
    @SaoHangBaBa 我只知道 DNS 放大攻击。
    2001225354
        9
    2001225354  
       2018-03-02 22:11:10 +08:00
    不如教教大家如何 cdn 友好和做到不被污染更安全呢
    ixinshang
        10
    ixinshang  
       2018-03-02 23:39:53 +08:00
    @SaoHangBaBa 这么快啊
    azh7138m
        11
    azh7138m  
       2018-03-03 01:33:03 +08:00 via Android
    580a388da131
        12
    580a388da131  
       2018-03-03 11:26:54 +08:00
    在这个论坛里公开的网站没一个不被 D 的。
    sniperhgy
        13
    sniperhgy  
       2018-03-03 12:53:05 +08:00
    @v2register 请教一下,从上面下载了 2.0.6 win64 版本,然后修改 dnscrypt-proxy.toml,将 Servers 的 section 改成
    [static]
    [static.'google']
    stamp = 'sdns://AgUAAAAAAAAAACDyXGrcc5eNecJ8nomJCJ-q6eCLTEn6bHic0hWGUwYQaA5kbnMuZ29vZ2xlLmNvbQ0vZXhwZXJpbWVudGFs'

    修改本地的 DNS 为 9.9.9.9,在 command line 中运行 dnscrypt-proxy -service install, 再运行 dnscrypt-proxy -service start,结果在 log 里面得到信息
    [2018-03-03 12:46:09] NOTICE] dnscrypt-proxy 2.0.6
    [2018-03-03 12:46:09] [NOTICE] dnscrypt-proxy 2.0.6
    [2018-03-03 12:46:09] [NOTICE] Loading the set of blocking rules from [dnscrypt-blacklist-domains.txt]
    [2018-03-03 12:46:09] [NOTICE] Service started
    [2018-03-03 12:46:09] [NOTICE] Loading the set of cloaking rules from [dnscrypt-cloaking-rules.txt]
    [2018-03-03 12:46:09] [NOTICE] Loading the set of forwarding rules from [dnscrypt-forwarding-rules.txt]
    [2018-03-03 12:46:09] [NOTICE] Loading the set of IP blocking rules from [dnscrypt-blacklist-ips.txt]
    [2018-03-03 12:46:09] [NOTICE] Now listening to 0.0.0.0:53 [UDP]
    [2018-03-03 12:46:09] [NOTICE] Now listening to 0.0.0.0:53 [TCP]
    [2018-03-03 12:46:12] [NOTICE] System DNS configuration not usable yet, exceptionally resolving [dns.google.com] using fallback resolver [9.9.9.9:53]
    [2018-03-03 12:46:17] [ERROR] Get https://dns.google.com/experimental?body=yv4BAAABAAAAAAABAAACAAEAACkQAAAAgAAAAA&ct=&dns=yv4BAAABAAAAAAABAAACAAEAACkQAAAAgAAAAA&random_padding=XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX: net/http: request canceled while waiting for connection (Client.Timeout exceeded while awaiting headers)
    [2018-03-03 12:46:17] [NOTICE] dnscrypt-proxy is waiting for at least one server to be reachable

    请问这个要怎么解决呢?谢谢了。
    v2register
        14
    v2register  
       2018-03-03 13:05:55 +08:00
    @sniperhgy #13 dns.google.com 被墙了:)
    sniperhgy
        15
    sniperhgy  
       2018-03-03 13:24:49 +08:00
    @v2register 好的,谢谢你。
    hfenger
        16
    hfenger  
       2018-03-03 13:48:46 +08:00
    其实 DNS 应该用区块链做的,但是由于 ZZ 原因,基本没有可行性
    oldzhg
        17
    oldzhg  
       2018-03-03 14:53:05 +08:00 via iPhone
    楼主速度删贴,维护一下还能用的
    yech1990
        18
    yech1990  
       2018-03-03 23:31:50 +08:00 via Android
    楼主怎么拿到公网 IP 的啊?也想自己搞一个
    miaomiao888
        19
    miaomiao888  
       2018-03-10 13:23:15 +08:00
    乙烷?

    λ tcping 120.79.195.172 53

    Probing 120.79.195.172:53/tcp - No response - time=2002.293ms
    Probing 120.79.195.172:53/tcp - No response - time=2000.991ms
    Probing 120.79.195.172:53/tcp - No response - time=2000.775ms
    Probing 120.79.195.172:53/tcp - No response - time=2000.206ms
    SaoHangBaBa
        20
    SaoHangBaBa  
    OP
       2018-03-14 20:06:19 +08:00 via Android
    @yech1990 VPS 哇
    SaoHangBaBa
        21
    SaoHangBaBa  
    OP
       2018-03-14 20:06:34 +08:00 via Android
    @oldzhg 哈哈哈 没事 可以正常使用啦
    SaoHangBaBa
        22
    SaoHangBaBa  
    OP
       2018-03-14 20:06:59 +08:00 via Android
    @miaomiao888 可以啦
    SaoHangBaBa
        23
    SaoHangBaBa  
    OP
       2018-03-14 20:08:05 +08:00 via Android
    @Loyalsoldier 上游的很重要~
    2001225354
        24
    2001225354  
       2018-03-15 22:25:40 +08:00
    写个教程大家自己动手呗
    关于     帮助文档     自助推广系统     博客     API     FAQ     Solana     3371 人在线   最高记录 6679       Select Language
    创意工作者们的社区
    World is powered by solitude
    VERSION: 3.9.8.5 24ms UTC 04:43 PVG 12:43 LAX 20:43 JFK 23:43
    Do have faith in what you're doing.
    ubao msn snddm index pchome yahoo rakuten mypaper meadowduck bidyahoo youbao zxmzxm asda bnvcg cvbfg dfscv mmhjk xxddc yybgb zznbn ccubao uaitu acv GXCV ET GDG YH FG BCVB FJFH CBRE CBC GDG ET54 WRWR RWER WREW WRWER RWER SDG EW SF DSFSF fbbs ubao fhd dfg ewr dg df ewwr ewwr et ruyut utut dfg fgd gdfgt etg dfgt dfgd ert4 gd fgg wr 235 wer3 we vsdf sdf gdf ert xcv sdf rwer hfd dfg cvb rwf afb dfh jgh bmn lgh rty gfds cxv xcv xcs vdas fdf fgd cv sdf tert sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf shasha9178 shasha9178 shasha9178 shasha9178 shasha9178 liflif2 liflif2 liflif2 liflif2 liflif2 liblib3 liblib3 liblib3 liblib3 liblib3 zhazha444 zhazha444 zhazha444 zhazha444 zhazha444 dende5 dende denden denden2 denden21 fenfen9 fenf619 fen619 fenfe9 fe619 sdf sdf sdf sdf sdf zhazh90 zhazh0 zhaa50 zha90 zh590 zho zhoz zhozh zhozho zhozho2 lislis lls95 lili95 lils5 liss9 sdf0ty987 sdft876 sdft9876 sdf09876 sd0t9876 sdf0ty98 sdf0976 sdf0ty986 sdf0ty96 sdf0t76 sdf0876 df0ty98 sf0t876 sd0ty76 sdy76 sdf76 sdf0t76 sdf0ty9 sdf0ty98 sdf0ty987 sdf0ty98 sdf6676 sdf876 sd876 sd876 sdf6 sdf6 sdf9876 sdf0t sdf06 sdf0ty9776 sdf0ty9776 sdf0ty76 sdf8876 sdf0t sd6 sdf06 s688876 sd688 sdf86