Concepts for Network Security
Aravind kumar TS
Posted on August 6, 2022
If you are working in Infrastructure as Services you must be aware of the below. There is no point working in Cloud computing without the below knowledge. People join in Cloud computing jobs as freshers, they have no clue about ๐ฆ๐ฒ๐ฟ๐๐ฒ๐ฟ- ๐ฆ๐๐ถ๐๐ฐ๐ต -๐ฅ๐ผ๐๐๐ฒ๐ฟ -๐๐ฎ๐ฐ๐ธ๐๐ฝ Servers- ๐ฆ๐๐ผ๐ฟ๐ฎ๐ด๐ฒ ๐ฏ๐ผ๐
๐ฒ๐ (NAS/Software Defined) as days pass, they will be able to work on repetitive tasks alone and couldn't progress. Whenever you read, read it from scratch ask questions( Why, What, How)
๐๐ก๐ฆ - Domain Name system. It maps your domain name with IP address. For example when you hit www.SANS.org it search the four servers available in the internet to find the Ip record.
The four servers are
- recursive resolvers, root nameservers, TLD nameservers, and authoritative nameservers. ๐ง๐๐ฆ - Transport Layer Security, Majority of the browser nowadays use TLS. The data you send over internet is encrypted. Apparently, majority of the email and chat platforms aren't using TLS. TLS use port 465. Follow this to enable TLS in your browser - https://lnkd.in/gytEmrpZ ๐ฆ๐ฆ๐ - Secure Socket Layer - SSL encrypts the link between a browser and Web Server. It ensures the data is private and secure. You can generate a SSL certificate from your server - https://lnkd.in/gkJ8Qc46 ๐๐ง๐ง๐ฃ - Hyper text transfer protocol - It operates at the TCP/IP level - The data transferred over this protocol is not private/not secure. Port number is 80 ๐๐ง๐ง๐ฃ๐ฆ - Hyper text transfer protocol secure - It uses http with SSL/TLS connection. The data transferred is secured/private. Port number is 443 ๐ง๐๐ฃ/๐๐ฃ ๐บ๐ผ๐ฑ๐ฒ๐น - It is responsible for transfer of messages between two devices. TCP breaks your messages into packets and sends them to the destination. The suite of protocols TCP/Ip use is listed below - . Datalink layer .Internet .Transport Layer .Application Layer https://lnkd.in/gVKWyb4w ๐ง๐ง๐ - Time To Live.
DNS records:
๐ ๐ฟ๐ฒ๐ฐ๐ผ๐ฟ๐ฑ - This is also called host name record as it stores the host name details along with its IP address (Ipv4)
It maps the domain name to the Ip address of the hosting server. We can configure multiple A records for one domain name.
to view your A record, use this ๐๐๐๐๐๐๐
- nslookup -debug brave.com # (be it any site of your choice)
๐๐๐๐ ๐ฟ๐ฒ๐ฐ๐ผ๐ฟ๐ฑ - This is exactly similar to A record wherein it stores your hostname along with your IPV6 address.
๐๐๐๐ฆ๐ ๐ซ๐๐๐จ๐ซ๐ - This is known as Canonical Name record where the domain name points to a different domain name.
Your request will reach the different domain name we specified earlier and its Ip address is returned.
Example - When you use a CName record and hit www.google.com the request redirects to www.yahoo.com (CNAME) and you are able to view the contents in www.yahoo.com
(Just an example here also applicable to offensive hack)
๐๐๐๐๐๐๐
in windows to check CName = nslookup -q=CNAME Shiva.com, In Linux = dig Shiva.com CNAME
๐ ๐ซ ๐ฟ๐ฒ๐ฐ๐ผ๐ฟ๐ฑ - This is known as mail exchanger record; it directs your email to a mail server. Sender Mails without an MX record are considered spam and it gets rejected by mail server.
MX record points to A or AAAA record (Domain name).
If your email domain name doesn't have a MX record you can send email, but you can't receive an email.
๐ก๐ญ๐ญ๐ฉ๐ฌ://๐ฐ๐ก๐๐ญ๐ฌ๐ฆ๐ฒ๐๐ง๐ฌ.๐ฆ๐/ - this site gives the DNS record details for your domain name.
To ๐๐๐๐ ๐ด๐ฟ ๐๐๐๐๐๐
๐๐ ๐ ๐
๐๐๐๐๐ in windows.
In cmd :
1. nslookup
2. set type=mx
3. your domain name.com
The output gives information about the Mx record of the domain name you entered.
๐ก๐ฎ๐บ๐ฒ ๐ฆ๐ฒ๐ฟ๐๐ฒ๐ฟ ๐ฟ๐ฒ๐ฐ๐ผ๐ฟ๐ฑ - This record points a dedicated name server to a domain, when you want to change the domain name server for a domain then this NS record should be updated. Every domain needs a name server so that the visitors in internet can reach them.
๐๐๐ ๐ซ๐๐๐จ๐ซ๐ - This record knows as Pointer record can also be called as reverse DNS lookup record. When you send an email this record checks whether the domain name used to send this email,
belongs to a legit Ip address (allocated for that domain).
PTR record for the IP address 192.0. 2.255 would be stored under "255.2.0. 192.in-addr. arpa"
In the next post we will look into rest of the DNS records, various ciphers, different types of servers in network etc.
-brb soon
(My Linkedin post is replicated here)
Posted on August 6, 2022
Join Our Newsletter. No Spam, Only the good stuff.
Sign up to receive the latest update from our blog.
Related
November 30, 2024