#SECURITYSPY DDNS UPDATE#

The provider then provides you access to a list of Dynamic DNS domains and allows you to create anywhere from 1 host record, to a dozen or more, mapping those DNS records to your current IP address(es)įigure 4 The console recognizes the IP address you are logging in from. The provider asks (or automatically detects) your public IP address (and/or may give you a client that can phone back to them when your IP address changes)ģ. If you pay in a little bit of cash, you're given access to a couple more domains.Ģ. Sign up with a dynamic DNS provider (which is usually free, or very affordable) such as no-ip, dyndns, freedns, dtdns and many other providers out thereįigure 3 The signup process is simple enough. Generally speaking, to use Dynamic DNS over the internet, you follow these steps:ġ. Finding and remembering your public IP address for your home internet connection is generally cumbersome, so Dynamic DNS providers were born.įigure 2 Dynamic DNS providers have been around for a while and are very common. If the DHCP lease expires or if your router/modem reboots, you will be assigned a new IP address. Now, how is Dynamic DNS used on the internet? Typically, ISPs will grant customers an internet routable IP address through DHCP (you can sometimes get a static IP address, but usually this costs more money). Automatic DNS updates makes finding resources on a corporate network easier. įigure 1 Overly simplistic, but you get the idea. This is an example of how Dynamic DNS works inside of an enterprise network. Active Directory makes note of this, and updates DNS records for hosts as necessary. That means IP addresses and hostnames are going to change constantly. As we all know, hosts join and leave the network all the time. When workstations join a domain, Active Directory creates DNS entries for these hosts to keep track of them.

One might ask 'what are the practical, legitimate uses for dynamic DNS?' Well, for one, take a close look at how Active Directory DNS updating works.

#SECURITYSPY DDNS UPDATE#

What is it and how has it been used in the past?ĭynamic DNS is the ability update record(s)on a DNS server somewhere automatically through some means (such as a software package on a network device, a script, or client software on an endpoint) and have those changes quickly propagated to DNS servers when a change in the client's IP address has occurred. How is dynamic DNS a threat to your enterprise? What can be done to mitigate this threat? Before we answer these questions, let's talk about dynamic DNS. Recently I began to notice a trend that Dynamic DNS providers have been repeatedly abused as a part of malware campaigns.

Securityspy ddns