{"id":94321,"date":"2020-09-15T19:42:32","date_gmt":"2020-09-15T17:42:32","guid":{"rendered":"https:\/\/prohoster.info\/blog\/administrirovanie\/rukovodstvo-po-bezopasnosti-dns"},"modified":"2020-09-15T19:42:32","modified_gmt":"2020-09-15T17:42:32","slug":"rukovodstvo-po-bezopasnosti-dns","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/rukovodstvo-po-bezopasnosti-dns","title":{"rendered":"DNSi turvajuht","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p><img decoding=\"async\" alt=\"DNSi turvajuht\" src=\"\/wp-content\/uploads\/2020\/09\/e29223def3c7c13eaa45a24967d6bba0.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nMis tahes tegevusega tegeleb ettev\u00f5te, peab turvalisus <noindex><a rel=\"nofollow\" href=\"https:\/\/www.varonis.com\/blog\/what-is-dns\/\"> DNS <\/a><\/noindex>olema lahutamatu osa selle turvaplaanist. Nime muutmise teenuseid, mis muundavad v\u00f5rgus\u00f5lmede nimetused IP-aadressideks, kasutavad s\u00f5na otseses m\u00f5ttes k\u00f5ik rakendused ja teenused veebis.<\/p>\n<p><strong>Kui r\u00fcndaja saab kontrolli organisatsiooni DNS-i \u00fcle, suudab ta probleemideta:<\/strong><\/p>\n<ul>\n<li>v\u00f5tta endale kontrolli \u00fcldkasutuses olevate ressursside \u00fcle<\/li>\n<li>suunata edasi sissetulevaid e-kirju, samuti veebip\u00e4ringuid ja autentimiskatseid<\/li>\n<li>luua ja kinnitada SSL\/TLS sertifikaate<\/li>\n<\/ul>\n<p>\n<strong>See juhend k\u00e4sitleb DNSi turvalisust kahel poolel:<\/strong><\/p>\n<ol>\n<li>Pideva DNS-i j\u00e4lgimise ja kontrollimise teostamine<\/li>\n<li>Kuidas uued DNS-i protokollid, nagu DNSSEC, DOH ja DoT, suudavad aidata kaitsta edastatud DNS-p\u00e4ringute terviklikkust ja konfidentsiaalsust<\/li>\n<\/ol>\n<p>\n<noindex><a rel=\"nofollow\" name=\"habracut\"><\/a><\/noindex><\/p>\n<h2> Mis on DNS-i turvalisus? <\/h2>\n<p>\n<img decoding=\"async\" alt=\"DNSi turvajuht\" src=\"\/wp-content\/uploads\/2020\/09\/6367857de248c9ee9435f8ec079600be.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<h3> DNSi turvalisus h\u00f5lmab kahte olulist komponenti:<\/h3>\n<p><\/p>\n<ol>\n<li>DNS-i teenuste \u00fcldise terviklikkuse ja kergesti k\u00e4ttesaadavuse tagamine, mis muundavad v\u00f5rgus\u00f5lmede nimed IP-aadressideks<\/li>\n<li>DNS-i tegevuse j\u00e4lgimine v\u00f5imalike turvaprobleemide tuvastamiseks teie v\u00f5rgus<\/li>\n<\/ol>\n<h3> Miks on DNS r\u00fcnnakute suhtes haavatav? <\/h3>\n<p>\nDNS-i tehnoloogia loodi interneti varajases arenguj\u00e4rgus, kaua enne, kui keegi hakkas m\u00f5tlema v\u00f5rguturbele. DNS t\u00f6\u00f6tab ilma autentimiseta ja kr\u00fcpteerimiseta, pimedalt t\u00f6\u00f6tledes mis tahes kasutaja p\u00e4ringuid.<\/p>\n<p>Seet\u00f5ttu on palju viise, kuidas kasutajat petta ja valeinformatsiooni edastada selle kohta, kus tegelikult toimuvad nimede muundurid IP-aadressideks.<\/p>\n<h2> DNS-i turvalisus: k\u00fcsimused ja koostisosad<\/h2>\n<p>\n<img decoding=\"async\" alt=\"DNSi turvajuht\" src=\"\/wp-content\/uploads\/2020\/09\/45d61ac4004631a2602518a3d4a51c3c.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nDNSi turvalisus koosneb mitmest p\u00f5hielemendist <em>komponendid<\/em>, millest iga\u00fcht tuleb t\u00e4ieliku kaitse tagamiseks arvesse v\u00f5tta:<\/p>\n<ul>\n<li><strong>Serverite ja haldusmenetluste turvalisuse suurendamine:<\/strong> t\u00f5stke serverite turvataset ja looge standardne k\u00e4ivitamise malli<\/li>\n<li><strong>Protokolli t\u00e4iustamine:<\/strong> rakendage DNSSEC, DoT v\u00f5i DoH<\/li>\n<li><strong>Anal\u00fc\u00fcs ja aruandlus: <\/strong>lisage DNSi s\u00fcndmustelogid SIEM-s\u00fcsteemi, et saada lisakonteksti intsidendi uurimisel<\/li>\n<li><strong>K\u00fcberluure ja ohtude tuvastamine:<\/strong> tellige aktiivne kanal, et saada teavet ohtude kohta<\/li>\n<li><strong>Automatiseerimine: <\/strong>looge maksimaalselt v\u00f5imalike stsenaariume, et automatiseerida protsesse<\/li>\n<\/ul>\n<p>\n\u00dclaltoodud k\u00f5rgema taseme koostisosad on vaid j\u00e4\u00e4m\u00e4e tipp DNS-i turvalisuses. J\u00e4rgmises osas vaatleme p\u00f5hjalikumalt konkreetsed rakendused ja parimad praktikad, mida peaksite teadma.<\/p>\n<h2> DNS-i r\u00fcnnakud<\/h2>\n<p>\n<img decoding=\"async\" alt=\"DNSi turvajuht\" src=\"\/wp-content\/uploads\/2020\/09\/f44708ad51b13385aa5ce10629944ecc.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<ul>\n<li><strong><noindex><a rel=\"nofollow\" href=\"https:\/\/www.varonis.com\/blog\/dns-cache-poisoning\/\">DNS-i manipuleerimine v\u00f5i \u201em\u00e4lu m\u00fcrgitamine\u201c<\/a><\/noindex>: <\/strong> s\u00fcsteemi haavatavuse kasutamine DNS-i vahem\u00e4lu haldamiseks, et suunata kasutajad teise kohta<\/li>\n<li><strong><noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/varonis\/blog\/513160\/\">DNS-i tunneldamine<\/a><\/noindex>: <\/strong>kasutatakse peamiselt kaug\u00fchenduste kaitse\u00fcmberp\u00f6\u00f6ramiseks<\/li>\n<li><strong>DNS-i peetus: <\/strong>tavaliikluse DNS-i suunamine teisele siht-DNS-serverile domeeni registratoori muutmise kaudu<\/li>\n<li><strong>NXDOMAIN r\u00fcnnak: <\/strong>DDoS-r\u00fcnnaku sooritamine autoriteediga DNS-serverile, saates vale domeeni p\u00e4ringud, et sundida vastust andma<\/li>\n<li><strong>phantom domeen: <\/strong> paneb DNS-i lahendaja ootama vastust mitteeksisteerivatelt domeenidelt, mis p\u00f5hjustab j\u00f5udluse langust<\/li>\n<li><strong>juhuslike alamdomeenide r\u00fcnnak: <\/strong> h\u00e4kkinud hostid ja botnetid korraldavad DDoS-r\u00fcnnaku kehtivale domeenile, kuid suunavad tule valele alamdomeenile, et sundida DNS-serverit teostama kirjeid otsingut ja v\u00f5tta teenuse \u00fcle kontrolli<\/li>\n<li><strong>domeeni blokeerimine: <\/strong> esindab hulga sp\u00e4mmvasta saatmist DNS-serveri ressursside blokeerimiseks<\/li>\n<li><strong>botnet-i r\u00fcnnak tellija varustuse abil: <\/strong> arvutite, modemite, ruuterite ja muude seadmete kogum, mis keskendub arvutusv\u00f5imsuse koondamisele kindlasse veebi saidile, et selle liikluseta koormus \u00fcletaks<\/li>\n<\/ul>\n<p><\/p>\n<h3> DNS-i kasutavad r\u00fcnnakud<\/h3>\n<p>\nR\u00fcnnakud, mis kasutavad mingil moel DNS-i, et r\u00fcnnata teisi s\u00fcsteeme (nt DNS-i kirje muutmine ei ole l\u00f5ppeesm\u00e4rk):<\/p>\n<ul>\n<li>Fast-Flux<\/li>\n<li>\u00dcksikud Flux-v\u00f5rgud<\/li>\n<li>Topelt Flux-v\u00f5rgud<\/li>\n<li><noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/varonis\/blog\/513160\/\">DNS-i tunneldamine<\/a><\/noindex> <\/li>\n<\/ul>\n<p><\/p>\n<h3> DNS-i r\u00fcnnakud<\/h3>\n<p>\nR\u00fcnnakud, mille tulemusena serverist DNS-i tagastatakse soovitud pahatahtlik IP-aadress:<\/p>\n<ul>\n<li>DNS-i manipuleerimine v\u00f5i \u201em\u00e4lu m\u00fcrgitamine\u201c<\/li>\n<li>DNS-i peetus<\/li>\n<\/ul>\n<p><\/p>\n<h2> Mis on DNSSEC?<\/h2>\n<p><img decoding=\"async\" alt=\"DNSi turvajuht\" src=\"\/wp-content\/uploads\/2020\/09\/929b6e632135bd1b059e403e7b4ddab8.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nDNSSEC \u2014 domeeninime teenuse turbemoodulid \u2014 kasutatakse DNS-i kirjete kinnitamiseks ilma igasuguste \u00fcldteaveteta iga konkreetse DNS-p\u00e4ringu kohta.<\/p>\n<p>DNSSEC kasutab digitaalsete allkirjade v\u00f5tmeid (PKI), et kinnitada, kas domeeninime p\u00e4ringu tulemused on saadud lubatud allikast.<br \/>\nDNSSECi rakendamine on mitte ainult parim t\u00f6\u00f6stustava, vaid aitab t\u00f5husalt v\u00e4ltida enamikku DNS-i r\u00fcnnakutest.<\/p>\n<h4>DNSSEC-i t\u00f6\u00f6p\u00f5him\u00f5te<\/h4>\n<p>\nDNSSEC t\u00f6\u00f6tab sarnaselt TLS\/HTTPS-iga, kasutades digitaalsete allkiri jaoks avalikke ja privaatseid v\u00f5tmete paare. Protsessi \u00fcldine \u00fclevaade:<\/p>\n<ol>\n<li>DNS-i kirjed allkirjastatakse privaatse ja avaliku v\u00f5tme paariga<\/li>\n<li>DNSSEC-i vastused sisaldavad soovitud kande, samuti allkirja ja avalikku v\u00f5tit<\/li>\n<li>Seej\u00e4rel <noindex><a rel=\"nofollow\" href=\"https:\/\/www.varonis.com\/blog\/pgp-encryption\/\">avalik v\u00f5ti <\/a><\/noindex>kasutatakse kande ja allkirja autentimise v\u00f5rdlemiseks<\/li>\n<\/ol>\n<h2> DNS-i ja DNSSEC-i turvalisus<\/h2>\n<p>\n<img decoding=\"async\" alt=\"DNSi turvajuht\" src=\"\/wp-content\/uploads\/2020\/09\/3bd1d530634e82ed6d80040a1d207ff0.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nDNSSEC on vahend DNS-i p\u00e4ringute terviklikkuse kontrollimiseks. See ei m\u00f5juta DNS-i privaatsust. Teisis\u00f5nu, DNSSEC v\u00f5ib anda teile kindluse, et vastus teie DNS-i p\u00e4ringule ei ole vale, kuid mis tahes pahatahtlik isik v\u00f5ib neid tulemusi n\u00e4ha t\u00e4pselt sellisena, nagu need teile edastati.<\/p>\n<h2> DoT \u2014 DNS TLS-i kaudu<\/h2>\n<p>\nTransport Layer Security (TLS) on kr\u00fcptograafiline protokoll, mis kaitseb edastatavat teavet v\u00f5rgus. Kui kliendi ja serveri vahel on loodud turvaline TLS-\u00fchendus, siis edastatud andmed kr\u00fcpteeritakse ja mingid vahendajad ei saa neid n\u00e4ha.<\/p>\n<p><noindex><a rel=\"nofollow\" href=\"https:\/\/www.varonis.com\/blog\/tls-vs-ssl\/\">TLS <\/a><\/noindex>kasutatakse k\u00f5ige sagedamini osa HTTPS-i (SSL) raames teie veebibrauseris, kuna p\u00e4ringud saadetakse turvalistele HTTP-serveritele.<\/p>\n<p>DNS-over-TLS (DNS TLS-i kaudu, DoT) kasutab TLS-protokolli UDP-liiklust tavap\u00e4raste DNS-p\u00e4ringute kr\u00fcpteerimiseks.<br \/>\nNende p\u00e4ringute kr\u00fcpteerimine tavalise tekstina aitab kaitsta kasutajaid v\u00f5i rakendusi, mis teeb p\u00e4ringuid, paljude r\u00fcnnakute eest.<\/p>\n<ul>\n<li><strong>MitM, ehk \"inimene keskel\"<\/strong>: ilma kr\u00fcpteerimiseta v\u00f5ib vahenduss\u00fcsteem, mis asub kliendi ja autoriteetse DNS-serveri vahel, potentsiaalselt saata kliendile vastusena vale v\u00f5i ohtliku teabe p\u00e4ringu kohta.<\/li>\n<li><strong>Nuhtlemine ja j\u00e4lgimine<\/strong>: ilma p\u00e4ringute kr\u00fcpteerimiseta on vahenduss\u00fcsteemidel lihtne n\u00e4ha, millistele saitidele konkreetne kasutaja v\u00f5i rakendus p\u00e4\u00e4seb. Kuigi ainult DNS-i alusel ei saa teada, millist konkreetset lehte veebisaidilt k\u00fclastatakse, piisab soovitud domeenide teadmisest, et luua s\u00fcsteemi v\u00f5i konkreetse inimese profiil.<\/li>\n<\/ul>\n<p><img decoding=\"async\" alt=\"DNSi turvajuht\" src=\"\/wp-content\/uploads\/2020\/09\/31bb5e540feac0302244253b1c12ed32.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\nAllikas: <noindex><a rel=\"nofollow\" href=\"https:\/\/faculty.sites.uci.edu\/zhouli\/files\/2019\/11\/conext19.pdf\">California \u00dclikool Irvine<\/a><\/noindex><\/p>\n<h2> DoH \u2014 DNS HTTPS-i kaudu<\/h2>\n<p>\nDNS-over-HTTPS (DNS \u00fcle HTTPS, DoH) on eksperimentaalne protokoll, mida edendavad koos Mozilla ja Google. Selle eesm\u00e4rgid on sarnased DoT-protokolliga \u2014 suurendada inimeste privaatsust internetis, kr\u00fcpteerides DNS-p\u00e4ringud ja -vastused.<\/p>\n<p>Standardsed DNS-p\u00e4ringud saadetakse \u00fcle UDP. P\u00e4ringuid ja vastuseid saab j\u00e4lgida selliste t\u00f6\u00f6riistade abil nagu <noindex><a rel=\"nofollow\" href=\"https:\/\/www.varonis.com\/blog\/how-to-use-wireshark\/\">Wireshark<\/a><\/noindex>. DoT kr\u00fcpteerib need p\u00e4ringud, kuid need tuvastatakse siiski kui \u00fcsna eristuv UDP-traffik v\u00f5rgus.<\/p>\n<p>DoH kasutab teistsugust l\u00e4henemist ning edastab kr\u00fcpteeritud p\u00e4ringud v\u00f5rgu s\u00f5lmede nimede lahendamiseks HTTPS-\u00fchenduste kaudu, mis n\u00e4evad v\u00f5rgu jaoks v\u00e4lja nagu iga teine veebip\u00e4ring.<\/p>\n<p>See erinevus omab v\u00e4ga olulisi tagaj\u00e4rgi nii s\u00fcsteemiadministraatoritele kui ka tuleviku nimede lahendamisele.<\/p>\n<ol>\n<li>DNS-filtreerimine on levinud meetod veebitrafiku filtreerimiseks, et kaitsta kasutajaid Phishing-r\u00fcnnakute, pahavara levitavate saitide v\u00f5i muu potentsiaalselt ohtliku internetiaktiivsuse eest ettev\u00f5tte v\u00f5rgus. DoH-protokoll p\u00e4\u00e4seb neist filtritest m\u00f6\u00f6da, mis v\u00f5ib potentsiaalselt suurendada kasutajate ja v\u00f5rgu riski. <\/li>\n<li>Praeguses nimede lahendamise mudelis saavad k\u00f5ik seadmed v\u00f5rgus enam-v\u00e4hem DNS-p\u00e4ringud samast kohast (m\u00e4rkitud DNS-serverilt). DoH ja eelk\u00f5ige selle Firefoxi realiseering n\u00e4itab, et tulevikus v\u00f5ib see muutuda. Iga rakendus arvutis v\u00f5ib saada teavet erinevatest DNS-allikatest, mis muudab vigade leidmise ja k\u00f5rvaldamise, turvalisuse tagamise ning riskide modelleerimise oluliselt keerulisemaks. <\/li>\n<\/ol>\n<p><img decoding=\"async\" alt=\"DNSi turvajuht\" src=\"\/wp-content\/uploads\/2020\/09\/46ece02ca361b133d4a6bd488b917c73.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\nAllikas: <noindex><a rel=\"nofollow\" href=\"https:\/\/www.varonis.com\/blog\/what-is-powershell\/\">www.varonis.com\/blog\/what-is-powershell<\/a><\/noindex><\/p>\n<h3> Mis vahe on DNS \u00fcle TLS ja DNS \u00fcle HTTPS?<\/h3>\n<p>\nAlustame DNS-ist \u00fcle TLS (DoT). Siin keskendutakse sellele, et originaal DNS-protokolli ei muudeta, vaid see edastatakse lihtsalt turvaliselt kaitstud kanali kaudu. DoH asetab DNS-i HTTP formaati enne p\u00e4ringute tegemist.<\/p>\n<h2> DNS-monitooringu teavitused<\/h2>\n<p>\n<img decoding=\"async\" alt=\"DNSi turvajuht\" src=\"\/wp-content\/uploads\/2020\/09\/fbbd9f320922dbd2eec180a253ba54f0.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nDNS-i liikluse t\u00f5hus j\u00e4lgimine teie v\u00f5rgus kahtlaste anomaaliate osas on h\u00e4davajalik h\u00e4kkimise varaseks tuvastamiseks. T\u00f6\u00f6riista nagu Varonis Edge kasutamine annab teile v\u00f5imaluse olla kursis k\u00f5ikide oluliste n\u00e4itajatega ja luua profiile iga konto jaoks teie v\u00f5rgus. Saate seadistada teavituste genereerimise, kui teatud aja jooksul toimuvad mitmed tegevused.<\/p>\n<p>DNS-i muudatuste, kontode asukohtade, samuti konfidentsiaalsete andmete esmakordse kasutamise ja nendele juurdep\u00e4\u00e4su faktide, samuti v\u00e4ljaspool t\u00f6\u00f6aega toimuvate tegevuste j\u00e4lgimine on vaid m\u00f5ned n\u00e4itajad, mida saab kokku siduda, et koostada ulatuslikum pilt avastamisest.<br \/>\n<br \/>Allikas: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/varonis\/blog\/519108\/\">habr.com<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u0427\u0435\u043c \u0431\u044b \u043d\u0438 \u0437\u0430\u043d\u0438\u043c\u0430\u043b\u0430\u0441\u044c \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f, \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c DNS \u0434\u043e\u043b\u0436\u043d\u0430 \u044f\u0432\u043b\u044f\u0442\u044c\u0441\u044f \u043d\u0435\u043e\u0442\u044a\u0435\u043c\u043b\u0435\u043c\u043e\u0439 \u0447\u0430\u0441\u0442\u044c\u044e \u0435\u0435 \u043f\u043b\u0430\u043d\u0430 \u043f\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044e \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438. \u0421\u043b\u0443\u0436\u0431\u044b \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u0438\u043c\u0435\u043d, \u043f\u0440\u0435\u043e\u0431\u0440\u0430\u0437\u043e\u0432\u044b\u0432\u0430\u044e\u0449\u0438\u0435 \u0438\u043c\u0435\u043d\u0430 \u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u0443\u0437\u043b\u043e\u0432 \u0432 IP-\u0430\u0434\u0440\u0435\u0441\u0430, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442\u0441\u044f \u0431\u0443\u043a\u0432\u0430\u043b\u044c\u043d\u043e \u0432\u0441\u0435\u043c\u0438 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f\u043c\u0438 \u0438 \u0441\u043b\u0443\u0436\u0431\u0430\u043c\u0438 \u0432 \u0441\u0435\u0442\u0438. \u0415\u0441\u043b\u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043f\u043e\u043b\u0443\u0447\u0438\u0442 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 DNS \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438, \u0442\u043e \u0441\u043c\u043e\u0436\u0435\u0442 \u0431\u0435\u0437 \u043f\u0440\u043e\u0431\u043b\u0435\u043c: \u043f\u0435\u0440\u0435\u0434\u0430\u0442\u044c \u0441\u0435\u0431\u0435 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u043d\u0430\u0434 \u0440\u0435\u0441\u0443\u0440\u0441\u0430\u043c\u0438, \u043d\u0430\u0445\u043e\u0434\u044f\u0449\u0438\u043c\u0438\u0441\u044f \u0432 \u043e\u0431\u0449\u0435\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u0435 \u043f\u0435\u0440\u0435\u043d\u0430\u043f\u0440\u0430\u0432\u0438\u0442\u044c \u0432\u0445\u043e\u0434\u044f\u0449\u0438\u0435 [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":94322,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-94321","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.1.1 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u0427\u0435\u043c \u0431\u044b \u043d\u0438 \u0437\u0430\u043d\u0438\u043c\u0430\u043b\u0430\u0441\u044c \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f, \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/rukovodstvo-po-bezopasnosti-dns\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.1.1\" \/>\n\t\t<meta property=\"og:locale\" content=\"et_EE\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u0420\u0443\u043a\u043e\u0432\u043e\u0434\u0441\u0442\u0432\u043e \u043f\u043e \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 DNS | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u0427\u0435\u043c \u0431\u044b \u043d\u0438 \u0437\u0430\u043d\u0438\u043c\u0430\u043b\u0430\u0441\u044c \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f, \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/rukovodstvo-po-bezopasnosti-dns\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2020-09-15T17:42:32+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2020-09-15T17:42:32+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47DNS-i turbejuhend | ProHoster","description":"Mis tahes tegevusega tegeleb ettev\u00f5te, peab turvalisus","canonical_url":"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/rukovodstvo-po-bezopasnosti-dns","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0420\u0443\u043a\u043e\u0432\u043e\u0434\u0441\u0442\u0432\u043e \u043f\u043e \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 DNS | ProHoster","og:description":"\u0427\u0435\u043c \u0431\u044b \u043d\u0438 \u0437\u0430\u043d\u0438\u043c\u0430\u043b\u0430\u0441\u044c \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f, \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c","og:url":"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/rukovodstvo-po-bezopasnosti-dns","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-09-15T17:42:32+00:00","article:modified_time":"2020-09-15T17:42:32+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"94321","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 11:29:29","updated":"2022-09-30 08:27:56","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/94321","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=94321"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/94321\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media\/94322"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=94321"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=94321"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=94321"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}