Question

During DNS poisoning attacks, what happens if the attacker is inline?

Answer 1

1. DNS poisoning is a type of attack which corrupts the data stored in the database of the Domain Name System(DNS) server.

2. DNS system is a system which is with hostname and ip addresses.

3. DNS poisoning attacks are used to spread computer worms and malwares.

4. There are 2 types of DNS poisoning attacks.

. Man-in the middle attack

. Denial of service attack.

5. To succeed in DNS poisoning attack, the inline attacker sends thousands of DNS request for fake subdomain of actual DNS server.

Since the requests are non-existent subdomain they consume memory and resources in the main server causing problems in the main server.

6.If the attacker is inline attacker and sends requests to main DNS server for response, if the user responds to this request attacker will be successful in his conquer to spread malware and worms to the intended computer systems or server and there by causing loss and failures in the system. So to prevent this we should be using firewall and DNS resolve systems.