<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
xmlns:content="http://purl.org/rss/1.0/modules/content/"
xmlns:dc="http://purl.org/dc/elements/1.1/"
xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
xmlns:atom="http://www.w3.org/2005/Atom"
xmlns:wfw="http://wellformedweb.org/CommentAPI/">
<channel>
<title>dwt&#039;s life - dns</title>
<link>https://dwt.life/tag/dns/</link>
<atom:link href="https://dwt.life/feed/tag/dns/" rel="self" type="application/rss+xml" />
<language>zh-CN</language>
<description></description>
<lastBuildDate>Sat, 09 Jul 2022 00:53:00 +0800</lastBuildDate>
<pubDate>Sat, 09 Jul 2022 00:53:00 +0800</pubDate>
<item>
<title>常见ISP及云服务提供商CIDR</title>
<link>https://dwt.life/archives/255/</link>
<guid>https://dwt.life/archives/255/</guid>
<pubDate>Sat, 09 Jul 2022 00:53:00 +0800</pubDate>
<dc:creator>Ricky</dc:creator>
<description><![CDATA[在为Yeap Cloud DNS的ISP列表整理的时候稍微收集了一下这些数据，会持续更新。Google Cloud：https://www.gstatic.com/ipranges/cloud....]]></description>
<content:encoded xml:lang="zh-CN"><![CDATA[
<p>在为Yeap Cloud DNS的ISP列表整理的时候稍微收集了一下这些数据，会持续更新。<br>Google Cloud：<br><a href="https://www.gstatic.com/ipranges/cloud.json">https://www.gstatic.com/ipranges/cloud.json</a><br>AWS：<br><a href="https://ip-ranges.amazonaws.com/ip-ranges.json">https://ip-ranges.amazonaws.com/ip-ranges.json</a><br>腾讯云：<br><a href="https://www.yeapcloud.com/static/cidr/tencent.txt">https://www.yeapcloud.com/static/cidr/tencent.txt</a><br>阿里云：<br><a href="https://www.yeapcloud.com/static/cidr/aliyun.txt">https://www.yeapcloud.com/static/cidr/aliyun.txt</a></p><pre><code class="lang-js">let arr = []
$(&#039;table tr&#039;).each(function(){arr.push($(this).find(&#039;td:eq(0)&#039;).text())})
arr.join(&quot;\n&quot;)</code></pre>
]]></content:encoded>
<slash:comments>0</slash:comments>
<comments>https://dwt.life/archives/255/#comments</comments>
<wfw:commentRss>https://dwt.life/feed/tag/dns/</wfw:commentRss>
</item>
<item>
<title>Windows下dnssec检测流程</title>
<link>https://dwt.life/archives/251/</link>
<guid>https://dwt.life/archives/251/</guid>
<pubDate>Tue, 14 Jun 2022 16:43:00 +0800</pubDate>
<dc:creator>Ricky</dc:creator>
<description><![CDATA[如果没有经过递归服的查询是无法获取到dnssec do的bit位的，所以只能手动指定dnssec ok，Microsoft doc给出了比较全面的文档，本文仅做部分指令的记录，且需要在power...]]></description>
<content:encoded xml:lang="zh-CN"><![CDATA[
<p>如果没有经过递归服的查询是无法获取到<code>dnssec do</code>的bit位的，所以只能手动指定<code>dnssec ok</code>，<br>Microsoft doc给出了比较全面的文档，本文仅做部分指令的记录，且需要在powershell下执行。</p><h2>普通dns查询</h2><p><code>Resolve-DnsName 主机名 –type A -server 127.0.0.1</code></p><h2>设置DO为1</h2><p><code>resolve-dnsname -name 主机名 -type A -server 127.0.0.1 -dnssecok</code></p><h2>获取dnssec key记录</h2><p><code>resolve-dnsname -name 主机名 -type dnskey -server 127.0.0.1 -dnssecok</code></p><h2>其他检测工具</h2><p>versign lab：<a href="https://dnssec-analyzer.verisignlabs.com/">https://dnssec-analyzer.verisignlabs.com/</a><br><a href="https://dnsviz.net/">https://dnsviz.net/</a></p><p><img src="https://pic.8oh.com.cn/cos/2022/06/23/8eff7d193e6c6_1655972148.png" alt="239.png" title="239.png"></p><p>从图中可以看出来，<code>.</code>和<code>.net</code>都是有dnssec签名保护的，包括我们的二级域也是被保护的（绿色框框），至于红色警告，是国内机器屏蔽了海外UDP导致的。</p><p>[1] <a href="https://docs.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2012-r2-and-2012/jj200221">https://docs.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2012-r2-and-2012/jj200221</a>(v=ws.11)</p>
]]></content:encoded>
<slash:comments>0</slash:comments>
<comments>https://dwt.life/archives/251/#comments</comments>
<wfw:commentRss>https://dwt.life/feed/tag/dns/</wfw:commentRss>
</item>
</channel>
</rss>