3 ms·
Awesome, less famous DNS trick by Dan Kaminsky: DNS source routing
- shykes 17y agoSummary: You can establish inbound IP traffic to a host inside a private network, with no IP to route to, and no DNAT setup. You do it by fooling the private network's local dns resolver into relaying trafic back in forth.
- shykes 17y agoSee slides 18 to 25 for the relevant part.
- rarrrrrr 17y agoThere was a Perl script for doing this called OzyManDNS which worked well. Seems like the Author's site is down, though. Does someone have a mirror?
- shykes 17y agoYou are referring to DNS tunneling, which is different. With OzymanDNS your laptop can tunnel out to the net in spite of your hotel's crappy gateway. With DNS source routing anyone on the Net can tunnel onto your laptop in spite of it having no way to receive inbound IP traffic.