Dns-suffix may lead to cross-domain and other security problems

0
36

Posted by yu xi4o on May 13

We all know that dhcpd can set the dns suffix for its clients. For example ,
If we set the dns suffix as "test.com". While doing the domain name
resolution such as www.xxx.com , all the client using this dhcp server will
try the following order.

1. System tries to look up www.xxx.com if the dns find a IP addr , the
client will go on use this ip.
2. Otherwise , the system will automatically add the dns suffix to have
another try(This…

Source: Dns-suffix may lead to cross-domain and other security problems