GbDns R3 released

George Barwood — Thu, 15 Jul 2010 21:44:37 -0000

GbDns is a secure DNS solution for Windows, written in C#. R2 has complete support for DNSSEC, both secure resolution, fully integrated signing and serving.

R3 ( Release 3) has the public signed root configured as default, subsequent to the signing of the root on July 15 2010.

GbDns R2 released

George Barwood — Thu, 10 Jun 2010 08:00:42 -0000

GbDns is a secure DNS solution for Windows, written in C#. R2 has complete support for DNSSEC, both secure resolution, fully integrated signing and serving.

GbDns: R1 released ( Secure your DNS against spoofing! )

George Barwood — Mon, 04 May 2009 17:07:59 -0000

Recursive DNS resolver for Windows using query repetition and other techniques to defeat spoofing attacks, with basic authoritative functionality in addition. Coded in C#.

GbDns is intended to be a comprehensive solution to DNS spoofing.

The CERT vulnerability note, VU#800113 explains that you should "Run a local DNS cache". Also, it notes that NAT devices "can reduce source port randomness", which means that source port randomization cannot be relied on for security.

Instead of relying on source port randomization, GbDns defeats spoofing by sending the query two (or more) times, and checks the responses agree ( this is an over-simplification, but sufficient to understand the principle ). To the best of my knowledge, GbDns is the only DNS resolver that does this, and therefore appears to be the only secure solution to DNS resolution.

GbDns runs as a local recursive cache, and only takes a minute or two to install.

Recent posts to news

GbDns R3 released

GbDns R2 released

GbDns: R1 released ( Secure your DNS against spoofing! )