{"id":90406,"date":"2020-08-01T01:41:57","date_gmt":"2020-07-31T23:41:57","guid":{"rendered":"https:\/\/prohoster.info\/blog\/administrirovanie\/chto-takoe-dns-tunnelirovanie-instrukcziya-po-obnaruzheniyu"},"modified":"2020-08-01T01:41:57","modified_gmt":"2020-07-31T23:41:57","slug":"chto-takoe-dns-tunnelirovanie-instrukcziya-po-obnaruzheniyu","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/chto-takoe-dns-tunnelirovanie-instrukcziya-po-obnaruzheniyu","title":{"rendered":"Mis on DNS-tuuneldamine? Juhend avastamiseks","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p><img decoding=\"async\" alt=\"Mis on DNS-tuuneldamine? Juhend avastamiseks\" src=\"\/wp-content\/uploads\/2020\/07\/f2bfcb839356ceed6ff0c8d47cec3497.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nDNS-tuuneldamine muudab domeeninimede s\u00fcsteemi h\u00e4kkerite relvaks. DNS on sisuliselt interneti tohutu telefoniraamat. Samuti on DNS p\u00f5hiprotokoll, mis v\u00f5imaldab administraatoritel esitada p\u00e4ringuid DNS-serveri andmebaasi. K\u00f5ik tundub arusaadav. Kuid kavalad h\u00e4kkerid on taipanud, et nad saavad varjatult suhelda rikutud arvutiga, sisestades juhtimisjuhiseid ja andmeid DNS-protokolli. See idee on DNS-tuuneldamise aluseks.<br \/>\n<noindex><a rel=\"nofollow\" name=\"habracut\"><\/a><\/noindex><\/p>\n<h2> Kuidas DNS-tuuneldamine t\u00f6\u00f6tab<\/h2>\n<p>\n<img decoding=\"async\" alt=\"Mis on DNS-tuuneldamine? Juhend avastamiseks\" src=\"\/wp-content\/uploads\/2020\/07\/f19bf65f1c0eba1326b5eaa4363b7c94.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nIgal asjal internetis on oma protokoll. Ja DNS toetab suhteliselt lihtsat <noindex><a rel=\"nofollow\" href=\"https:\/\/www.verisign.com\/en_US\/website-presence\/online\/how-dns-works\/index.xhtml\">protokoll <\/a><\/noindex>k\u00fcsimus-vastus t\u00fc\u00fcpi. Kui soovite n\u00e4ha, kuidas see t\u00f6\u00f6tab, v\u00f5ite k\u00e4ivitada nslookup \u2013 peamise t\u00f6\u00f6riista DNS-p\u00e4ringute esitamiseks. Saate k\u00fcsida aadressi, lihtsalt sisestades huvipakkuva domeeninime, n\u00e4iteks:<\/p>\n<p><img decoding=\"async\" alt=\"Mis on DNS-tuuneldamine? Juhend avastamiseks\" src=\"\/wp-content\/uploads\/2020\/07\/0125acad0c2431eccbc0ea21b9b854fe.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nMeie puhul vastas protokoll domeeni IP-aadressiga. DNS-protokolli m\u00f5istes tegin ma aadressi p\u00e4ringu v\u00f5i nn 'A' t\u00fc\u00fcpi p\u00e4ringu. On ka teisi p\u00e4ringut\u00fc\u00fcpe, mille puhul DNS-protokoll vastab erineva andmev\u00e4ljade kogumiga, mida, nagu me hiljem n\u00e4eme, saavad kurjategijad \u00e4ra kasutada.<\/p>\n<p>Nii v\u00f5i teisiti tegeleb DNS-protokoll p\u00f5him\u00f5tteliselt p\u00e4ringu edastamise ja vastuse tagastamisega kliendile. Aga mis juhtub, kui kurjategija lisab varjatud s\u00f5numi domeeninime p\u00e4ringusse? N\u00e4iteks, selle asemel et sisestada t\u00e4iesti legitiimne URL, sisestab ta andmed, mida soovib edastada:<\/p>\n<p><img decoding=\"async\" alt=\"Mis on DNS-tuuneldamine? Juhend avastamiseks\" src=\"\/wp-content\/uploads\/2020\/07\/676fc6d7878912b590e315b1664565ce.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nOletame, et kurjategijal on juurdep\u00e4\u00e4s DNS-serverile. Sel juhul saab ta edastada andmeid \u2014 n\u00e4iteks isikuandmeid \u2014 ja teda ei pruugita avastada. L\u00f5ppude l\u00f5puks, miks peaks DNS-p\u00e4ring olema midagi ebaseaduslikku? <\/p>\n<p>Serverit kontrollides saavad h\u00e4kkerid petta vastuseid ja saata andmeid tagasi sihts\u00fcsteemi. See v\u00f5imaldab neil edastada s\u00f5numeid, mis on peidetud erinevates DNS-vastuse andmev\u00e4ljadest, pahavara kaudu nakatunud masinas, juhistega, mis sarnanevad teatud kausta otsimisega.<\/p>\n<p>DNS-i tunnelimise osa r\u00fcnnakust seisneb <noindex><a rel=\"nofollow\" href=\"https:\/\/www.varonis.com\/blog\/powershell-obfuscation-stealth-through-confusion-part-i\/\">andmete ja k\u00e4skude varjamises <\/a><\/noindex> monitooringus\u00fcsteemide avastamise eest. H\u00e4kkerid v\u00f5ivad kasutada base32, base64 ja muid s\u00fcmbolite kogumeid, v\u00f5i isegi andmeid kr\u00fcpteerida. Selline kodeering j\u00e4\u00e4b m\u00e4rkamatuks lihtsate ohuavastamise utiliitide eest, mis otsivad avatud tekstis.<\/p>\n<p>Ja see ongi DNS-i tunnelimine!<\/p>\n<h2> DNS-i tunnelimise r\u00fcnnakute ajalugu<\/h2>\n<p>\nK\u00f5igel on algus, sealhulgas ideel DNS-protokolli haaramisest h\u00e4kkerite eesm\u00e4rkidel. \u00dcksikasjade p\u00f5hjal toimus esimene <noindex><a rel=\"nofollow\" href=\"https:\/\/groups.google.com\/forum\/#!msg\/muc.lists.bugtraq\/Myj1gKWzCAY\/QI6BrCtG7cgJ\">arutelu <\/a><\/noindex>sellise r\u00fcnnaku \u00fcle Oskar Pearsoni poolt Bugtraq'i meililisti kaudu aprillis 1998.<\/p>\n<p>Aastaks 2004 tutvustati DNS-i tunnelimist Black Hat'il h\u00e4kkerimeetodina Dan Kaminski esituses. Seega kasvas idee v\u00e4ga kiiresti t\u00f5eliseks r\u00fcnnaku t\u00f6\u00f6riistaks.<\/p>\n<p>T\u00e4na on DNS-i tunnelimine kindlustanud oma koha <noindex><a rel=\"nofollow\" href=\"https:\/\/www.securityweek.com\/iranian-hackers-heavily-reliant-dns-tunneling\">potentsiaalsete ohtude kaartidel <\/a><\/noindex>(ja infos\u00fcsteemide turbeblogijad paluvad sageli selle kohta selgitusi).<\/p>\n<p>Kas olete kuulnud <noindex><a rel=\"nofollow\" href=\"https:\/\/blog.talosintelligence.com\/2019\/04\/seaturtle.html\">Sea Turtle <\/a><\/noindex>? \u042d\u0442\u043e \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0449\u0430\u044f \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u044f \u043a\u0438\u0431\u0435\u0440\u043f\u0440\u0435\u0441\u0442\u0443\u043f\u043d\u044b\u0445 \u0433\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u043e\u043a \u2014 \u0441\u043a\u043e\u0440\u0435\u0435 \u0432\u0441\u0435\u0433\u043e, \u0441\u043f\u043e\u043d\u0441\u0438\u0440\u0443\u0435\u043c\u0430\u044f \u0433\u043e\u0441\u0443\u0434\u0430\u0440\u0441\u0442\u0432\u043e\u043c, \u2014 \u043d\u0430\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u0430\u044f \u043d\u0430 \u0437\u0430\u0445\u0432\u0430\u0442 \u043b\u0435\u0433\u0438\u0442\u0438\u043c\u043d\u044b\u0445 DNS-\u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 \u0441 \u0446\u0435\u043b\u044c\u044e \u043f\u0435\u0440\u0435\u043d\u0430\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f DNS-\u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432 \u043d\u0430 \u0441\u043e\u0431\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0435 \u0441\u0435\u0440\u0432\u0435\u0440\u0430. \u042d\u0442\u043e \u043e\u0437\u043d\u0430\u0447\u0430\u0435\u0442, \u0447\u0442\u043e \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0431\u0443\u0434\u0443\u0442 \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u00ab\u043f\u043b\u043e\u0445\u0438\u0435\u00bb IP-\u0430\u0434\u0440\u0435\u0441\u0430, \u0443\u043a\u0430\u0437\u044b\u0432\u0430\u044e\u0449\u0438\u0435 \u043d\u0430 \u043f\u043e\u0434\u0434\u0435\u043b\u044c\u043d\u044b\u0435 \u0432\u0435\u0431-\u0441\u0442\u0440\u0430\u043d\u0438\u0446\u044b \u043f\u043e\u0434 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435\u043c \u0445\u0430\u043a\u0435\u0440\u043e\u0432, \u2014 \u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, Google \u0438\u043b\u0438 FedEx. \u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0441\u043c\u043e\u0433\u0443\u0442 \u0437\u0430\u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0443\u0447\u0451\u0442\u043d\u044b\u0435 \u0437\u0430\u043f\u0438\u0441\u0438 \u0438 \u043f\u0430\u0440\u043e\u043b\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0442\u0435 \u043d\u0435\u043e\u0441\u043e\u0437\u043d\u0430\u043d\u043d\u043e \u0432\u0432\u0435\u0434\u0443\u0442 \u0438\u0445 \u043d\u0430 \u0442\u0430\u043a\u0438\u0445 \u043f\u043e\u0434\u0434\u0435\u043b\u044c\u043d\u044b\u0445 \u0441\u0430\u0439\u0442\u0430\u0445. \u042d\u0442\u043e \u043d\u0435 DNS-\u0442\u0443\u043d\u043d\u0435\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435, \u043d\u043e \u043f\u0440\u043e\u0441\u0442\u043e \u0435\u0449\u0451 \u043e\u0434\u043d\u043e \u0441\u043a\u0432\u0435\u0440\u043d\u043e\u0435 \u043f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u0435 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044f DNS-\u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 \u0445\u0430\u043a\u0435\u0440\u0430\u043c\u0438.<\/p>\n<h2> DNS-i tunnelimise ohtudest<\/h2>\n<p>\n<img decoding=\"async\" alt=\"Mis on DNS-tuuneldamine? Juhend avastamiseks\" src=\"\/wp-content\/uploads\/2020\/07\/368dcf4cbd442f994cb3385788f0bbd2.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nDNS-tunnelimine on nagu halva uudise alguse indikaator. Milliseid t\u00e4pselt? Oleme juba r\u00e4\u00e4kinud mitmest, kuid laske meil need struktureerida:<\/p>\n<ul>\n<li><strong>Andmete v\u00e4ljaviimine (ekshfiltreerimine)<\/strong> \u2013 h\u00e4kker edastab kriitilisi andmeid salaja DNS-i kaudu. See pole kindlasti k\u00f5ige t\u00f5husam viis teabe edastamiseks ohvri arvutist \u2013 arvestades k\u00f5iki kulusid ja kodeeringuid \u2013 kuid see t\u00f6\u00f6tab ja on samas salajane!<\/li>\n<li><strong>Juhtimine ja kontroll (Command and Control, l\u00fchendatud C2)<\/strong> \u2013 h\u00e4kkerid kasutavad DNS-i protokolli lihtsate juhtimiscommandide saatmiseks, \u00fctleme, l\u00e4bi <noindex><a rel=\"nofollow\" href=\"https:\/\/www.varonis.com\/blog\/koadic-lol-malware-meets-python-based-command-and-control-c2-server-part-i\/\">kaugjuhtimise trooja <\/a><\/noindex>(Remote Access Trojan, l\u00fchendatud RAT).<\/li>\n<li><strong>IP-tunnelimine DNS-i kaudu <\/strong>\u2013 see v\u00f5ib k\u00f5lada hullumeelsena, kuid on olemas utiliite, mis rakendavad IP-st\u00e4ki DNS-i protokolli p\u00e4ringute ja vastuste peale. See teeb andmete edastamise FTP, Netcat, ssh jne kaudu suhteliselt lihtsaks. \u00c4\u00e4rmiselt kurja!<\/li>\n<\/ul>\n<p><\/p>\n<h2>DNS-tunnelimise tuvastamine<\/h2>\n<p>\n<img decoding=\"async\" alt=\"Mis on DNS-tuuneldamine? Juhend avastamiseks\" src=\"\/wp-content\/uploads\/2020\/07\/8e182ef5a3d5be38b27f79317008ca0f.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nOn kaks peamist meetodit DNS-i kuritarvitamise tuvastamiseks: koormuse anal\u00fc\u00fcs ja liikluse anal\u00fc\u00fcs.<\/p>\n<p>Koormuse anal\u00fc\u00fcsi korral <strong>koormuse anal\u00fc\u00fcs <\/strong> kaitsev pool otsib andmete anomaaliaid, mis edastatakse m\u00f5lemas suunas ja mida saab avastada statistiliste meetoditega: kahtlaselt n\u00e4ivad hostinimed, DNS-kirjete t\u00fc\u00fcp, mida ei kasutata piisavalt sageli, v\u00f5i mittestandardne kodeering.<\/p>\n<p>Koormuse anal\u00fc\u00fcsi korral <strong>traffic analysis <\/strong>hindab iga domeeni DNS-p\u00e4ringute arvu v\u00f5rreldes keskmise tasemega. K\u00fcberkurjategijad, kes kasutavad DNS-tunnelimist, genereerivad serverile suures mahus liiklust. Teoreetiliselt on see palju suurem kui normaalne DNS-viestluste vahetus. Ja seda on oluline j\u00e4lgida! <\/p>\n<h3>DNS-tunnelimise utiliidid<\/h3>\n<p>\nKui soovite teha omaenda pentesti ja kontrollida, kui h\u00e4sti suudab teie ettev\u00f5te avastada ja reageerida sarnasele tegevusele, on selleks mitu utiliidi. K\u00f5ik nad suudavad tunnelida re\u017eiimis <em>IP-Over-DNS<\/em>:<\/p>\n<ul>\n<li><noindex><a rel=\"nofollow\" href=\"https:\/\/code.kryo.se\/iodine\/\">Iodine <\/a><\/noindex>\u2013 saadaval paljudel platvormidel (Linux, Mac OS, FreeBSD ja Windows). Lubab luua SSH-shelli siht- ja juhtkompuutri vahel. Siin on hea <noindex><a rel=\"nofollow\" href=\"https:\/\/calebmadrigal.com\/dns-tunneling-with-iodine\/\">guide <\/a><\/noindex>Iodine seadistamise ja kasutamise kohta.<\/li>\n<li><noindex><a rel=\"nofollow\" href=\"https:\/\/dankaminsky.com\/?s=ozymandns\">OzymanDNS<\/a><\/noindex> \u2013 DNS tunneling project by Dan Kaminsky, written in Perl. It allows connection via SSH.<\/li>\n<li><noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/iagox86\/dnscat2\">DNSCat2 <\/a><\/noindex>\u2013 \"The DNS tunnel that won't make you nauseous.\" It creates an encrypted C2 channel for sending\/downloading files, executing shells, etc.<\/li>\n<\/ul>\n<p><\/p>\n<h3>DNS monitoring utilities<\/h3>\n<p>\nBelow is a list of several utilities that will be useful for detecting tunneling attacks:<\/p>\n<ul>\n<li><noindex><a rel=\"nofollow\" href=\"https:\/\/hunttools.gitbooks.io\/mercenary-linux\/content\/dnshunter_module.html\">dnsHunter<\/a><\/noindex> \u2013 A Python module designed for MercenaryHuntFramework and Mercenary-Linux. It reads .pcap files, extracts DNS queries, and performs geolocation matching, which aids in analysis.<\/li>\n<li><noindex><a rel=\"nofollow\" href=\"https:\/\/www.vs.uni-due.de\/wander\/reassemble_dns\/\">reassemble_dns <\/a><\/noindex>\u2013 A Python utility that reads .pcap files and analyzes DNS messages.<\/li>\n<\/ul>\n<p><\/p>\n<h2>Micro FAQ on DNS tunneling<\/h2>\n<p>\nUseful information in the form of questions and answers!<\/p>\n<p><strong>Q: What is tunneling?<\/strong><br \/>\n<strong>A:<\/strong> It is simply a method of transmitting data over an existing protocol. The underlying protocol provides a dedicated channel or tunnel, which is then used to hide the information being transmitted.<\/p>\n<p><strong>Q: When was the first DNS tunneling attack carried out?<\/strong><br \/>\n<strong>A: <\/strong> Me ei tea! Kui tead, palun anna meile teada. Meie teada algatas esimesed arutelud r\u00fcnnaku \u00fcle Oskar Pirsan Bugtraq'i postilisti kaudu aprillis 1998.<\/p>\n<p><strong>K\u00fcsimus: Millised r\u00fcnnakud sarnanevad DNS-tunnelimisega?<\/strong><br \/>\n<strong>A: <\/strong>DNS ei ole kaugeltki ainus protokoll, mida tunneldamiseks kasutada. N\u00e4iteks haldamis- ja kontrollitavad pahavara (C2) kasutavad sageli HTTP-d suhtlusteede peitmiseks. Sarnaselt DNS-tunnelimisele varjab h\u00e4kker oma andmeid, kuid sel juhul n\u00e4evad nad v\u00e4lja nagu tavalise veebibrauseri liiklus, mis p\u00f6\u00f6rdub kauguselt saidi poole (kurjategija kontrolli all). See v\u00f5ib j\u00e4\u00e4da monitorimisprogrammide jaoks m\u00e4rkamatuks, kui need ei ole seadistatud tunnustama <noindex><a rel=\"nofollow\" href=\"https:\/\/attack.mitre.org\/tactics\/TA0011\/\">oht <\/a><\/noindex>HTTP protokolli kuritarvitamist h\u00e4kkerite eesm\u00e4rkidel.<\/p>\n<p>Kas soovite, et aitaksime DNS-tunnelimise tuvastamisel? Tutvuge meie mooduliga <noindex><a rel=\"nofollow\" href=\"https:\/\/www.varonis.com\/ru\/products-edge\/\"> Varonis Edge <\/a><\/noindex>ja proovige tasuta <noindex><a rel=\"nofollow\" href=\"https:\/\/info.varonis.com\/demo\/ru\"> demo<\/a><\/noindex>!<br \/>\n<br \/>Allikas: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/varonis\/blog\/513160\/\">habr.com<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>DNS-\u0442\u0443\u043d\u043d\u0435\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u043f\u0440\u0435\u0432\u0440\u0430\u0449\u0430\u0435\u0442 \u0441\u0438\u0441\u0442\u0435\u043c\u0443 \u0434\u043e\u043c\u0435\u043d\u043d\u044b\u0445 \u0438\u043c\u0451\u043d \u0432 \u043e\u0440\u0443\u0436\u0438\u0435 \u0445\u0430\u043a\u0435\u0440\u043e\u0432. DNS \u2013 \u044d\u0442\u043e, \u043f\u043e \u0441\u0443\u0442\u0438, \u043e\u0433\u0440\u043e\u043c\u043d\u0430\u044f \u0442\u0435\u043b\u0435\u0444\u043e\u043d\u043d\u0430\u044f \u043a\u043d\u0438\u0433\u0430 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0430. \u0410 \u0435\u0449\u0451 DNS \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0431\u0430\u0437\u043e\u0432\u044b\u043c \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u043e\u043c, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u043c \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430\u043c \u0434\u0435\u043b\u0430\u0442\u044c \u0437\u0430\u043f\u0440\u043e\u0441\u044b \u0432 \u0431\u0430\u0437\u0443 \u0434\u0430\u043d\u043d\u044b\u0445 DNS-\u0441\u0435\u0440\u0432\u0435\u0440\u0430. \u041f\u043e\u043a\u0430 \u0432\u0440\u043e\u0434\u0435 \u0432\u0441\u0451 \u043f\u043e\u043d\u044f\u0442\u043d\u043e. \u041d\u043e \u0445\u0438\u0442\u0440\u044b\u0435 \u0445\u0430\u043a\u0435\u0440\u044b \u043e\u0441\u043e\u0437\u043d\u0430\u043b\u0438, \u0447\u0442\u043e \u043c\u043e\u0436\u043d\u043e \u0441\u043a\u0440\u044b\u0442\u043d\u043e \u043e\u0431\u0449\u0430\u0442\u044c\u0441\u044f \u0441 \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440\u043e\u043c-\u0436\u0435\u0440\u0442\u0432\u043e\u0439 \u043f\u0443\u0442\u0451\u043c \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044f \u0443\u043f\u0440\u0430\u0432\u043b\u044f\u044e\u0449\u0438\u0445 \u043a\u043e\u043c\u0430\u043d\u0434 \u0438 \u0434\u0430\u043d\u043d\u044b\u0445 \u0432 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b DNS. \u042d\u0442\u0430 [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":90407,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-90406","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 4.9.10 - aioseo.com -->\n\t<meta name=\"description\" content=\"DNS-\u0442\u0443\u043d\u043d\u0435\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u043f\u0440\u0435\u0432\u0440\u0430\u0449\u0430\u0435\u0442 \u0441\u0438\u0441\u0442\u0435\u043c\u0443 \u0434\u043e\u043c\u0435\u043d\u043d\u044b\u0445 \u0438\u043c\u0451\u043d \u0432 \u043e\u0440\u0443\u0436\u0438\u0435 \u0445\u0430\u043a\u0435\u0440\u043e\u0432. DNS \u2013 \u044d\u0442\u043e, \u043f\u043e \u0441\u0443\u0442\u0438, \u043e\u0433\u0440\u043e\u043c\u043d\u0430\u044f \u0442\u0435\u043b\u0435\u0444\u043e\u043d\u043d\u0430\u044f \u043a\u043d\u0438\u0433\u0430 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0430. \u0410 \u0435\u0449\u0451 DNS \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0431\u0430\u0437\u043e\u0432\u044b\u043c \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u043e\u043c, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u043c \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430\u043c \u0434\u0435\u043b\u0430\u0442\u044c \u0437\u0430\u043f\u0440\u043e\u0441\u044b \u0432 \u0431\u0430\u0437\u0443 \u0434\u0430\u043d\u043d\u044b\u0445 DNS-\u0441\u0435\u0440\u0432\u0435\u0440\u0430. \u041f\u043e\u043a\u0430 \u0432\u0440\u043e\u0434\u0435 \u0432\u0441\u0451 \u043f\u043e\u043d\u044f\u0442\u043d\u043e. \u041d\u043e \u0445\u0438\u0442\u0440\u044b\u0435 \u0445\u0430\u043a\u0435\u0440\u044b \u043e\u0441\u043e\u0437\u043d\u0430\u043b\u0438, \u0447\u0442\u043e \u043c\u043e\u0436\u043d\u043e \u0441\u043a\u0440\u044b\u0442\u043d\u043e \u043e\u0431\u0449\u0430\u0442\u044c\u0441\u044f \u0441 \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440\u043e\u043c-\u0436\u0435\u0440\u0442\u0432\u043e\u0439 \u043f\u0443\u0442\u0451\u043c \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044f \u0443\u043f\u0440\u0430\u0432\u043b\u044f\u044e\u0449\u0438\u0445 \u043a\u043e\u043c\u0430\u043d\u0434 \u0438 \u0434\u0430\u043d\u043d\u044b\u0445 \u0432 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b DNS. \u042d\u0442\u0430\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/chto-takoe-dns-tunnelirovanie-instrukcziya-po-obnaruzheniyu\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 4.9.10\" \/>\n\t\t<meta property=\"og:locale\" content=\"et_EE\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u0427\u0442\u043e \u0442\u0430\u043a\u043e\u0435 DNS-\u0442\u0443\u043d\u043d\u0435\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435? \u0418\u043d\u0441\u0442\u0440\u0443\u043a\u0446\u0438\u044f \u043f\u043e \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u044e | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"DNS-\u0442\u0443\u043d\u043d\u0435\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u043f\u0440\u0435\u0432\u0440\u0430\u0449\u0430\u0435\u0442 \u0441\u0438\u0441\u0442\u0435\u043c\u0443 \u0434\u043e\u043c\u0435\u043d\u043d\u044b\u0445 \u0438\u043c\u0451\u043d \u0432 \u043e\u0440\u0443\u0436\u0438\u0435 \u0445\u0430\u043a\u0435\u0440\u043e\u0432. DNS \u2013 \u044d\u0442\u043e, \u043f\u043e \u0441\u0443\u0442\u0438, \u043e\u0433\u0440\u043e\u043c\u043d\u0430\u044f \u0442\u0435\u043b\u0435\u0444\u043e\u043d\u043d\u0430\u044f \u043a\u043d\u0438\u0433\u0430 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0430. \u0410 \u0435\u0449\u0451 DNS \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0431\u0430\u0437\u043e\u0432\u044b\u043c \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u043e\u043c, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u043c \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430\u043c \u0434\u0435\u043b\u0430\u0442\u044c \u0437\u0430\u043f\u0440\u043e\u0441\u044b \u0432 \u0431\u0430\u0437\u0443 \u0434\u0430\u043d\u043d\u044b\u0445 DNS-\u0441\u0435\u0440\u0432\u0435\u0440\u0430. \u041f\u043e\u043a\u0430 \u0432\u0440\u043e\u0434\u0435 \u0432\u0441\u0451 \u043f\u043e\u043d\u044f\u0442\u043d\u043e. \u041d\u043e \u0445\u0438\u0442\u0440\u044b\u0435 \u0445\u0430\u043a\u0435\u0440\u044b \u043e\u0441\u043e\u0437\u043d\u0430\u043b\u0438, \u0447\u0442\u043e \u043c\u043e\u0436\u043d\u043e \u0441\u043a\u0440\u044b\u0442\u043d\u043e \u043e\u0431\u0449\u0430\u0442\u044c\u0441\u044f \u0441 \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440\u043e\u043c-\u0436\u0435\u0440\u0442\u0432\u043e\u0439 \u043f\u0443\u0442\u0451\u043c \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044f \u0443\u043f\u0440\u0430\u0432\u043b\u044f\u044e\u0449\u0438\u0445 \u043a\u043e\u043c\u0430\u043d\u0434 \u0438 \u0434\u0430\u043d\u043d\u044b\u0445 \u0432 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b DNS. \u042d\u0442\u0430\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/chto-takoe-dns-tunnelirovanie-instrukcziya-po-obnaruzheniyu\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2020-07-31T23:41:57+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2020-07-31T23:41:57+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Mis on DNS-tunnelimine? Tuletusjuhend | ProHoster","description":"DNS-tunnelimine muudab domeeninime s\u00fcsteemi h\u00e4kkerite relvaks. DNS on p\u00f5him\u00f5tteliselt hiiglaslik telefoniraamat internetis. Samuti on DNS p\u00f5h protokoll, mis v\u00f5imaldab administratoridel teha p\u00e4ringuid DNS-serveri andmebaasi. Seni k\u00f5ik selge. Kuid kuri h\u00e4kkerid on avastanud, et nad saavad varjatult suhelda ohvri arvutiga, sisestades kontrollk\u00e4sklusi ja andmeid DNS-protokolli. See","canonical_url":"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/chto-takoe-dns-tunnelirovanie-instrukcziya-po-obnaruzheniyu","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0427\u0442\u043e \u0442\u0430\u043a\u043e\u0435 DNS-\u0442\u0443\u043d\u043d\u0435\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435? \u0418\u043d\u0441\u0442\u0440\u0443\u043a\u0446\u0438\u044f \u043f\u043e \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u044e | ProHoster","og:description":"DNS-\u0442\u0443\u043d\u043d\u0435\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u043f\u0440\u0435\u0432\u0440\u0430\u0449\u0430\u0435\u0442 \u0441\u0438\u0441\u0442\u0435\u043c\u0443 \u0434\u043e\u043c\u0435\u043d\u043d\u044b\u0445 \u0438\u043c\u0451\u043d \u0432 \u043e\u0440\u0443\u0436\u0438\u0435 \u0445\u0430\u043a\u0435\u0440\u043e\u0432. DNS \u2013 \u044d\u0442\u043e, \u043f\u043e \u0441\u0443\u0442\u0438, \u043e\u0433\u0440\u043e\u043c\u043d\u0430\u044f \u0442\u0435\u043b\u0435\u0444\u043e\u043d\u043d\u0430\u044f \u043a\u043d\u0438\u0433\u0430 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0430. \u0410 \u0435\u0449\u0451 DNS \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0431\u0430\u0437\u043e\u0432\u044b\u043c \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u043e\u043c, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u043c \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430\u043c \u0434\u0435\u043b\u0430\u0442\u044c \u0437\u0430\u043f\u0440\u043e\u0441\u044b \u0432 \u0431\u0430\u0437\u0443 \u0434\u0430\u043d\u043d\u044b\u0445 DNS-\u0441\u0435\u0440\u0432\u0435\u0440\u0430. \u041f\u043e\u043a\u0430 \u0432\u0440\u043e\u0434\u0435 \u0432\u0441\u0451 \u043f\u043e\u043d\u044f\u0442\u043d\u043e. \u041d\u043e \u0445\u0438\u0442\u0440\u044b\u0435 \u0445\u0430\u043a\u0435\u0440\u044b \u043e\u0441\u043e\u0437\u043d\u0430\u043b\u0438, \u0447\u0442\u043e \u043c\u043e\u0436\u043d\u043e \u0441\u043a\u0440\u044b\u0442\u043d\u043e \u043e\u0431\u0449\u0430\u0442\u044c\u0441\u044f \u0441 \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440\u043e\u043c-\u0436\u0435\u0440\u0442\u0432\u043e\u0439 \u043f\u0443\u0442\u0451\u043c \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044f \u0443\u043f\u0440\u0430\u0432\u043b\u044f\u044e\u0449\u0438\u0445 \u043a\u043e\u043c\u0430\u043d\u0434 \u0438 \u0434\u0430\u043d\u043d\u044b\u0445 \u0432 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b DNS. \u042d\u0442\u0430","og:url":"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/chto-takoe-dns-tunnelirovanie-instrukcziya-po-obnaruzheniyu","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-07-31T23:41:57+00:00","article:modified_time":"2020-07-31T23:41:57+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"90406","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 12:52:33","updated":"2022-09-29 17:04:38"},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/90406","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=90406"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/90406\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media\/90407"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=90406"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=90406"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=90406"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}