Category Archives: DNS

11 November, 2026

WHOIS Protocol: History, Limitations, and What Replaced It

Learn how the WHOIS protocol grew from a 1982 ARPANET directory, why port 43 falls short today, and what replaced it for domain lookups.

26 October, 2026

RFC2136 Dynamic DNS on Ubuntu: Deploy BIND9 with TSIG-Secured Updates

Build an authoritative BIND9 server on Ubuntu that accepts RFC2136 dynamic DNS updates, signed with TSIG keys and scoped per client with update-policy, then...

20 October, 2026

FortiGate DDNS: `config system ddns` Actionable Configuration

Configure FortiGate config system ddns for FortiGuard, No-IP, and RFC 2136. Get working CLI syntax for dual WAN, IPv6, and upstream NAT scenarios.

8 October, 2026

Red Team Tool Series: Six DNS Recon Utilities Every Practitioner Should Own

Deploy DNS reconnaissance tools like dnsmap and dnsrecon on Linux and macOS. Learn installation, usage, and gotchas for effective subdomain enumeration.

15 July, 2026

Using host file equivalent on the FortiGate Firewall

Configure a FortiGate local DNS zone to override hostnames. Use CLI or GUI to create local DNS entries for testing without upstream queries.

3 July, 2026

DNS Demystified: Lookup, Caching, Zones, Records, and Security from End to End

Understand the DNS resolution process from stub resolver to cache expiry. Learn how TTL, zones, and DNSSEC work with practical dig commands and config...

16 May, 2026

A Practical Guide to DNSRecon: DNS Enumeration Done Right

Master dnsrecon DNS enumeration with this practical guide. Learn to use standard, brute force, and zone transfer modes to map infrastructure safely and effectively.

16 May, 2026

The Deep Dive Dig Cheat Sheet: A Practical Guide to DNS Troubleshooting

Master dig command DNS troubleshooting with this practical cheat sheet. Learn essential flags, trace delegation chains, and diagnose DNSSEC issues quickly.

7 May, 2026

Picking a Public DNS Resolver in 2026: Quad9, Cloudflare 1.1.1.1, and OpenDNS Compared

Compare Quad9, Cloudflare 1.1.1.1, and OpenDNS for speed, privacy, and security. Choose the best public DNS resolver for your network.

19 April, 2026

Deploying Secondary Bind9 as a DNS Server on Ubuntu Server

Configure BIND9 secondary DNS on Ubuntu Server. Set up zone transfers, recursion ACLs, and firewall rules for a resilient secondary name server.

18 April, 2026

Deploying Bind9 as DNS Server on Ubuntu Server

Configure Bind9 on Ubuntu Server with secure ACLs and zone files. Learn to set up authoritative DNS, restrict recursion, and verify queries with dig.

2 August, 2021

DNS Doctoring on FortiGate

Fix FortiGate DNS doctoring issues when internal clients use external DNS. Configure VIPs with any interface and create inside-to-inside policies for seamless connectivity.

12 March, 2021

Collecting DNS Logs for Post-Mortem

Learn how to enable DNS query logging on Windows Server and BIND. Configure debug logs, rotate files, and parse data for post-mortem analysis.

19 November, 2019

DNS over TLS (DoT) on the Fortigate

Learn how to configure DNS over TLS on FortiGate 6.2+. Set up strict or opportunistic DoT mode and block DNS over HTTPS with application...

19 November, 2019

DoH (DNS over HTTPS) vs DoT (DNS over TLS) in the Secure DNS Wars

Compare DNS over HTTPS vs DNS over TLS. Learn how DoT and DoH work, their security implications, and how to choose the right protocol...

9 November, 2019

Creating a VIP on Fortigate using a Dynamic IP address

Configure a Fortigate VIP with a dynamic IP address using DDNS and 0.0.0.0. Learn the exact steps for port forwarding and policy creation.

10 September, 2019

Adding DNS Suffix to your SSL VPN

Fix SSL VPN hostname resolution by adding a DNS suffix via FortiGate CLI. Learn the exact command to append search domains for non-FQDN lookups.

20 August, 2019

Conditional DNS Forwarding with FortiGate and FortiProxy

Configure FortiGate conditional DNS forwarding for specific domains. Learn to enable recursive DNS and set up CLI queries for FortiProxy and FortiGate.