{"id":94321,"date":"2020-09-15T19:42:32","date_gmt":"2020-09-15T17:42:32","guid":{"rendered":"https:\/\/prohoster.info\/blog\/administrirovanie\/rukovodstvo-po-bezopasnosti-dns"},"modified":"2020-09-15T19:42:32","modified_gmt":"2020-09-15T17:42:32","slug":"rukovodstvo-po-bezopasnosti-dns","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/rukovodstvo-po-bezopasnosti-dns","title":{"rendered":"DNS-i turbe juhend","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p><img decoding=\"async\" alt=\"DNS-i turbe juhend\" src=\"\/wp-content\/uploads\/2020\/09\/e29223def3c7c13eaa45a24967d6bba0.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nMille iganes ettev\u00f5te ei tegeleks, peab turvalisus <noindex><a rel=\"nofollow\" href=\"https:\/\/www.varonis.com\/blog\/what-is-dns\/\"> DNS <\/a><\/noindex>olema lahutamatu osa tema turvaplannist. Nime teenused, mis muundavad v\u00f5rgu s\u00f5lmede nimesid IP-aadressideks, on kasutusel k\u00f5ikides rakendustes ja teenustes internetis.<\/p>\n<p><strong>Kui r\u00fcndaja saab organisatsiooni DNS-i \u00fcle kontrolli, siis saab ta h\u00f5lpsasti:<\/strong><\/p>\n<ul>\n<li>v\u00f5tta enda alla avalike ressursside haldamise<\/li>\n<li>suunata saabuvate e-kirjade, veebip\u00e4ringute ja autentimise katsete liiklust<\/li>\n<li>luua ja kinnitada SSL\/TLS-sertifikaate<\/li>\n<\/ul>\n<p>\n<strong>See juhend k\u00e4sitleb DNS-i turvalisust kahest vaatenurgast:<\/strong><\/p>\n<ol>\n<li>DNS-i pidev j\u00e4lgimine ja kontrollimine<\/li>\n<li>Kuidas uued DNS-i protokollid nagu DNSSEC, DOH ja DoT aitavad kaitsta edastatavate DNS-p\u00e4ringute terviklikkust ja privaatsust<\/li>\n<\/ol>\n<p>\n<noindex><a rel=\"nofollow\" name=\"habracut\"><\/a><\/noindex><\/p>\n<h2> Mis on DNS-i turvalisus? <\/h2>\n<p>\n<img decoding=\"async\" alt=\"DNS-i turbe juhend\" src=\"\/wp-content\/uploads\/2020\/09\/6367857de248c9ee9435f8ec079600be.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<h3> DNS-i turvalisus sisaldab kahte olulist aspekti:<\/h3>\n<p><\/p>\n<ol>\n<li>DNS-i teenuste \u00fcldise terviklikkuse ja k\u00e4ttesaadavuse tagamine, mis muundavad v\u00f5rgu s\u00f5lmede nimesid IP-aadressideks<\/li>\n<li>DNS-aktiivsuse j\u00e4lgimine, et tuvastada v\u00f5imalikud turbeprobleemid teie v\u00f5rgus.<\/li>\n<\/ol>\n<h3> Miks on DNS r\u00fcnnakute suhtes haavatav? <\/h3>\n<p>\nDNS-tehnoloogia loodi interneti arengu algusaegadel, palju enne, kui keegi hakkas m\u00f5tlema veebiturbele. DNS t\u00f6\u00f6tab ilma autentimise ja kr\u00fcpteerimiseta, k\u00e4sitledes akna all k\u00f5igi kasutajate p\u00e4ringuid.<\/p>\n<p>Sellega seoses on mitmeid viise, kuidas kasutajat petta ja teavet manipuleerida, mis n\u00e4itab valeandmeid selle kohta, kus tegelikult toimub nimede t\u00f5lkimine IP-aadressideks.<\/p>\n<h2> DNS-i turvalisus: k\u00fcsimused ja komponendid<\/h2>\n<p>\n<img decoding=\"async\" alt=\"DNS-i turbe juhend\" src=\"\/wp-content\/uploads\/2020\/09\/45d61ac4004631a2602518a3d4a51c3c.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nDNS-i turvalisus koosneb mitmest p\u00f5hikomponendist, <em>komponente<\/em>, mida tuleb t\u00e4ieliku kaitse tagamiseks arvesse v\u00f5tta:<\/p>\n<ul>\n<li><strong>Serverite ja haldusprotseduuride turvalisuse tugevdamine:<\/strong> t\u00f5stke oma serverite turvatase ja looge standardne kasutusele v\u00f5tmise mall.<\/li>\n<li><strong>Protokolli t\u00e4iustamine:<\/strong> implementige DNSSEC, DoT v\u00f5i DoH.<\/li>\n<li><strong>Anal\u00fc\u00fctika ja aruandlus: <\/strong>lisage DNS-i s\u00fcndmuste logi SIEM-s\u00fcsteemi, et pakkuda t\u00e4iendavat konteksti juhtumite uurimisel.<\/li>\n<li><strong>K\u00fcberluure ja ohtude tuvastamine:<\/strong> tellige aktiivne ohtude anal\u00fc\u00fcsi kanal<\/li>\n<li><strong>Automatiseerimine: <\/strong>looge maksimaalne arv stsenaariume, et automatiseerida protsesse<\/li>\n<\/ul>\n<p>\n\u00dclaltoodud k\u00f5rgema taseme komponendid on vaid DNS-i turvalisuse j\u00e4\u00e4m\u00e4e tipp. J\u00e4rgmises osas k\u00e4sitleme \u00fcksikasjalikult spetsiifilisemaid kasutusv\u00f5imalusi ja parimaid praktikaid, millest peate teadlik olema.<\/p>\n<h2> DNS-aatakid<\/h2>\n<p>\n<img decoding=\"async\" alt=\"DNS-i turbe juhend\" src=\"\/wp-content\/uploads\/2020\/09\/f44708ad51b13385aa5ce10629944ecc.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<ul>\n<li><strong><noindex><a rel=\"nofollow\" href=\"https:\/\/www.varonis.com\/blog\/dns-cache-poisoning\/\">DNS-i valevahetus v\u00f5i \"m\u00fcrgitamine\"<\/a><\/noindex>: <\/strong> s\u00fcsteemi haavatavuse kasutamine DNS-i vahem\u00e4lu haldamiseks kasutajate suunamiseks muusse kohta<\/li>\n<li><strong><noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/varonis\/blog\/513160\/\">DNS-tunnelimine<\/a><\/noindex>: <\/strong>kasutatakse peamiselt kaug\u00fchenduse kaitsemehhanismide \u00fcletamiseks<\/li>\n<li><strong>DNS-i p\u00fc\u00fcdmine: <\/strong>tavalise DNS-i liikluse suunamine teisele DNS-serverile, muutes domeeni registri<\/li>\n<li><strong>NXDOMAIN-aatakk: <\/strong>DDoS-aataku korraldamine autoriteetses DNS-serveris, saates valeid domeenip\u00e4ringuid, et saada sundvastus<\/li>\n<li><strong>phantom domeen: <\/strong> sunub DNS-i lahenduri ootama vastust mitteeksisteerivatelt domeenidelt, mis toob kaasa j\u00f5udluse languse<\/li>\n<li><strong>juhuslike alamdomeenide r\u00fcnnak: <\/strong> H\u00e4kkerid ja botv\u00f5rgud r\u00fcndavad aktiivset domeeni DDoS-r\u00fcnnakuga, kuid keskenduvad vale alamdomeenidele, et sundida DNS-serverit otsima kirjeid ja haarama teenuse \u00fcle kontrolli.<\/li>\n<li><strong>domeeni blokeerimine: <\/strong> esindab hulga r\u00e4mpspostik\u00f5nesid DNS-serveri ressursside blokeerimiseks.<\/li>\n<li><strong>botv\u00f5rgu r\u00fcnnak abonendi seadmetelt: <\/strong> komplekt arvuteid, modemite, ruuterite ja muude seadmete kohta, mis fokusseerivad arvutusv\u00f5imsuse kindlale veebisaidile selle \u00fclek\u00fcllustamiseks liiklussoovidega.<\/li>\n<\/ul>\n<p><\/p>\n<h3> R\u00fcnnakud, mis kasutavad DNS-i<\/h3>\n<p>\nR\u00fcnnakud, mis mingil viisil kasutavad DNS-i teiste s\u00fcsteemide r\u00fcndamiseks (st DNS-kirjete muutmine ei ole l\u00f5ppeesm\u00e4rk):<\/p>\n<ul>\n<li>Fast-Flux<\/li>\n<li>\u00dche Fluxi v\u00f5rgud<\/li>\n<li>Topelt Fluxi v\u00f5rgud<\/li>\n<li><noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/varonis\/blog\/513160\/\">DNS-tunnelimine<\/a><\/noindex> <\/li>\n<\/ul>\n<p><\/p>\n<h3> DNS-aatakid<\/h3>\n<p>\nR\u00fcnnakud, mille k\u00e4igus tagastatakse DNS-serverilt soovitud h\u00e4kkeri IP-aadress:<\/p>\n<ul>\n<li>DNS-i asendamine v\u00f5i 'm\u00fcrgitamine' vahem\u00e4lu<\/li>\n<li>DNS-i pealtkuulamine<\/li>\n<\/ul>\n<p><\/p>\n<h2> Mis on DNSSEC?<\/h2>\n<p><img decoding=\"async\" alt=\"DNS-i turbe juhend\" src=\"\/wp-content\/uploads\/2020\/09\/929b6e632135bd1b059e403e7b4ddab8.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nDNSSEC \u2014 domeeninime teenuse turvamoodulid \u2014 kasutatakse DNS-kirjete kontrollimiseks ilma vajaduseta teada iga konkreetse DNS-p\u00e4ringu \u00fclevaate.<\/p>\n<p>DNSSEC kasutab digiallkirja v\u00f5tmeid (PKI), et kinnitada, kas domeeninime p\u00e4ringu tulemused on saadud lubatud allikatest.<br \/>\nDNSSEC-iga tutvumine on mitte ainult parim t\u00f6\u00f6stustava, vaid aitab t\u00f5husalt v\u00e4ltida enamikku DNS-r\u00fcnnakutest.<\/p>\n<h4>DNSSEC toimimise p\u00f5him\u00f5te<\/h4>\n<p>\nDNSSEC t\u00f6\u00f6tab sarnaselt TLS\/HTTPS-iga, kasutades avatud ja suletud v\u00f5tmete paare DNS-i kirjade digiallkirjastamiseks. Protsessi \u00fcldine \u00fclevaade:<\/p>\n<ol>\n<li>DNS-i kirjad allkirjastatakse suletud ja avatud v\u00f5tmete paariga.<\/li>\n<li>DNSSEC-i p\u00e4ringute vastused sisaldavad n\u00f5utud kirjet koos allkirja ja avaliku v\u00f5tmega.<\/li>\n<li>Seej\u00e4rel <noindex><a rel=\"nofollow\" href=\"https:\/\/www.varonis.com\/blog\/pgp-encryption\/\">avalik v\u00f5ti <\/a><\/noindex>kasutatakse kirje ja allkirja ehtsuse kontrollimiseks.<\/li>\n<\/ol>\n<h2> DNS-i turvalisus ja DNSSEC<\/h2>\n<p>\n<img decoding=\"async\" alt=\"DNS-i turbe juhend\" src=\"\/wp-content\/uploads\/2020\/09\/3bd1d530634e82ed6d80040a1d207ff0.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nDNSSEC on vahend DNS-i p\u00e4ringute terviklikkuse kontrollimiseks. See ei m\u00f5juta DNS-i privaatsust. Teisis\u00f5nu, DNSSEC v\u00f5ib anda teile kindlustunde, et teie DNS-i p\u00e4ringule antud vastus ei ole vale, kuid iga kurjategija v\u00f5ib n\u00e4ha neid tulemusi sellisena, nagu need teile edastati.<\/p>\n<h2> DoT \u2014 DNS TLS-i kaudu<\/h2>\n<p>\nTransport Layer Security (transportkihi turvalisus, TLS) on kr\u00fcptograafiline protokoll, mis kaitseb edastatavaid andmeid v\u00f5rgus. Kui TLS-i abil on kliendi ja serveri vahel kehtestatud turvaline \u00fchendus, siis on edastatavad andmed kr\u00fcpteeritud ning \u00fckski kolmas osaline ei saa neid n\u00e4ha.<\/p>\n<p><noindex><a rel=\"nofollow\" href=\"https:\/\/www.varonis.com\/blog\/tls-vs-ssl\/\">TLS <\/a><\/noindex>kasutatakse k\u00f5ige sagedamini osana HTTPS-ist (SSL) teie veebibrauseris, kuna p\u00e4ringud saadetakse kaitstud HTTP-serveritesse.<\/p>\n<p>DNS-over-TLS (DNS TLS-i kohal, DoT) kasutab TLS-protokolli, et kr\u00fcpteerida UDP-liiklus tava DNS-p\u00e4ringutest.<br \/>\nSelle liikluse kr\u00fcptimine tavatekstina aitab kaitsta kasutajaid v\u00f5i rakendusi, mis p\u00e4ringuid esitavad, mitmesuguste r\u00fcnnakute eest.<\/p>\n<ul>\n<li><strong>MitM, v\u00f5i \"mees keset\"<\/strong>: ilma kr\u00fcptimiseta v\u00f5ib vahepealne s\u00fcsteem, mis asub kliendi ja autoriteetse DNS-serveri vahel, potentsiaalselt saata kliendile vale v\u00f5i ohtlikku teavet vastuseks p\u00e4ringule.<\/li>\n<li><strong>Spioneerimine ja j\u00e4lgimine<\/strong>: ilma kr\u00fcpteerimisega on vahes\u00fcsteemidel lihtne j\u00e4lgida, millistele saitidele konkreetne kasutaja v\u00f5i rakendus p\u00f6\u00f6rdub. Kuigi pelgalt DNS-i p\u00f5hjal ei saa teada, millisele lehele saidil minnakse, on lihtsalt domeenide tundmine piisav, et luua s\u00fcsteemi v\u00f5i \u00fcksiku inimese profiil.<\/li>\n<\/ul>\n<p><img decoding=\"async\" alt=\"DNS-i turbe juhend\" src=\"\/wp-content\/uploads\/2020\/09\/31bb5e540feac0302244253b1c12ed32.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\nAllikas: <noindex><a rel=\"nofollow\" href=\"https:\/\/faculty.sites.uci.edu\/zhouli\/files\/2019\/11\/conext19.pdf\">California \u00dclikool, Irvine<\/a><\/noindex><\/p>\n<h2> DoH \u2014 DNS \u00fcle HTTPS<\/h2>\n<p>\nDNS-over-HTTPS (DNS \u00fcle HTTPS, DoH) on eksperimentaalne protokoll, mida edendavad koost\u00f6\u00f6s Mozilla ja Google. Selle eesm\u00e4rgid on sarnased DoT protokolliga \u2014 suurendada inimeste privaatsust internetis, kr\u00fcpteerides DNS-i p\u00e4ringud ja vastused.<\/p>\n<p>Tavap\u00e4rased DNS-i p\u00e4ringud edastatakse UDP kaudu. P\u00e4ringuid ja vastuseid saab j\u00e4lgida selliste t\u00f6\u00f6riistadega nagu <noindex><a rel=\"nofollow\" href=\"https:\/\/www.varonis.com\/blog\/how-to-use-wireshark\/\">Wireshark<\/a><\/noindex>. DoT kr\u00fcpteerib need p\u00e4ringud, kuid neid tuvastatakse siiski kui \u00fcsna eristatav UDP liiklus v\u00f5rgus.<\/p>\n<p>DoH kasutab teistsugust l\u00e4henemist ja edastab kr\u00fcpteeritud p\u00e4ringud v\u00f5rgus\u00f5lmede nimede t\u00f5lkimiseks HTTPS-\u00fchenduste kaudu, mis n\u00e4evad v\u00f5rgus v\u00e4lja nagu iga teine veebip\u00e4ring.<\/p>\n<p>See erinevus on v\u00e4ga olulised tagaj\u00e4rjed nii s\u00fcsteemiadministratoritele kui ka tulevastele nimede t\u00f5lkimise s\u00fcsteemidele.<\/p>\n<ol>\n<li>DNS-filtering on levinud viis veebiliikluse filtreerimiseks, et kaitsta kasutajaid tulem\u00fc\u00fcri r\u00fcnnakute, pahatahtlike programmide levitamise v\u00f5i muu potentsiaalselt ohtliku internetitegevuse eest ettev\u00f5tte v\u00f5rgus. DoH-protokoll m\u00f6\u00f6dub neist filtritest, seades kasutajad ja v\u00f5rgu potentsiaalselt k\u00f5rgema riski alla. <\/li>\n<li>Praeguses nimede konverteerimise mudelis saavad k\u00f5ik seadmed v\u00f5rgus mingil m\u00e4\u00e4ral DNS-p\u00e4ringud \u00fchest ja samast kohast (kindlaksm\u00e4\u00e4ratud DNS-serverilt). DoH ja eriti selle rakendus Firefoxis n\u00e4itavad, et tulevikus v\u00f5ib see muutuda. Iga rakendus arvutis v\u00f5ib saada andmeid erinevatest DNS-allikatest, mis oluliselt raskendab probleemide leidmist ja lahendamist, turvalisuse tagamist ja riskide modelleerimist. <\/li>\n<\/ol>\n<p><img decoding=\"async\" alt=\"DNS-i turbe juhend\" src=\"\/wp-content\/uploads\/2020\/09\/46ece02ca361b133d4a6bd488b917c73.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\nAllikas: <noindex><a rel=\"nofollow\" href=\"https:\/\/www.varonis.com\/blog\/what-is-powershell\/\">www.varonis.com\/blog\/what-is-powershell<\/a><\/noindex><\/p>\n<h3> Milline on erinevus DNS-i TLS-i ja DNS-i HTTPS-i vahel?<\/h3>\n<p>\nAlustame DNS-ist TLS-i kaudu (DoT). Siin on peamine t\u00e4helepanu sellele, et originaal DNS-protokoll j\u00e4\u00e4b muutumatuks ning edastatakse lihtsalt turvaliselt kaitstud kanali kaudu. DoH aga paigutab DNS-i HTTP-formaati enne p\u00e4ringute t\u00e4itmist.<\/p>\n<h2> DNS-i j\u00e4lgimise teated<\/h2>\n<p>\n<img decoding=\"async\" alt=\"DNS-i turbe juhend\" src=\"\/wp-content\/uploads\/2020\/09\/fbbd9f320922dbd2eec180a253ba54f0.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nDNS-i liikluse t\u00f5hus j\u00e4lgimine teie v\u00f5rgus kahtlaste anomaaliate osas on h\u00e4davajalik varajase h\u00e4mamise tuvastamiseks. T\u00f6\u00f6riista, n\u00e4iteks Varonis Edge kasutamine annab teile v\u00f5imaluse olla teadlik k\u00f5igist olulistest n\u00e4itajatest ja luua profiile igale konto jaoks teie v\u00f5rgus. Saate seadistada hoiatuste genereerimise, mis p\u00f5hinevad teatud aja jooksul toimuvate tegevuste kombinatsioonidel.<\/p>\n<p>DNS-i muudatuste, konto asukohtade j\u00e4lgimine, samuti esimese kasutamise ja konfidentsiaalsete andmete juurde p\u00e4\u00e4semise faktid ning mitte-t\u00f6\u00f6aja tegevus \u2014 need on vaid m\u00f5ned n\u00e4itajad, mida saab v\u00f5rrelda, et koostada p\u00f5hjalikum avastamise pilt.<br \/>\n<br \/>Allikas: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/varonis\/blog\/519108\/\">habr.com<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u0427\u0435\u043c \u0431\u044b \u043d\u0438 \u0437\u0430\u043d\u0438\u043c\u0430\u043b\u0430\u0441\u044c \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f, \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c DNS \u0434\u043e\u043b\u0436\u043d\u0430 \u044f\u0432\u043b\u044f\u0442\u044c\u0441\u044f \u043d\u0435\u043e\u0442\u044a\u0435\u043c\u043b\u0435\u043c\u043e\u0439 \u0447\u0430\u0441\u0442\u044c\u044e \u0435\u0435 \u043f\u043b\u0430\u043d\u0430 \u043f\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044e \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438. \u0421\u043b\u0443\u0436\u0431\u044b \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u0438\u043c\u0435\u043d, \u043f\u0440\u0435\u043e\u0431\u0440\u0430\u0437\u043e\u0432\u044b\u0432\u0430\u044e\u0449\u0438\u0435 \u0438\u043c\u0435\u043d\u0430 \u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u0443\u0437\u043b\u043e\u0432 \u0432 IP-\u0430\u0434\u0440\u0435\u0441\u0430, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442\u0441\u044f \u0431\u0443\u043a\u0432\u0430\u043b\u044c\u043d\u043e \u0432\u0441\u0435\u043c\u0438 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f\u043c\u0438 \u0438 \u0441\u043b\u0443\u0436\u0431\u0430\u043c\u0438 \u0432 \u0441\u0435\u0442\u0438. \u0415\u0441\u043b\u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043f\u043e\u043b\u0443\u0447\u0438\u0442 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 DNS \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438, \u0442\u043e \u0441\u043c\u043e\u0436\u0435\u0442 \u0431\u0435\u0437 \u043f\u0440\u043e\u0431\u043b\u0435\u043c: \u043f\u0435\u0440\u0435\u0434\u0430\u0442\u044c \u0441\u0435\u0431\u0435 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u043d\u0430\u0434 \u0440\u0435\u0441\u0443\u0440\u0441\u0430\u043c\u0438, \u043d\u0430\u0445\u043e\u0434\u044f\u0449\u0438\u043c\u0438\u0441\u044f \u0432 \u043e\u0431\u0449\u0435\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u0435 \u043f\u0435\u0440\u0435\u043d\u0430\u043f\u0440\u0430\u0432\u0438\u0442\u044c \u0432\u0445\u043e\u0434\u044f\u0449\u0438\u0435 [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":94322,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-94321","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 4.9.10 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u0427\u0435\u043c \u0431\u044b \u043d\u0438 \u0437\u0430\u043d\u0438\u043c\u0430\u043b\u0430\u0441\u044c \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f, \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c DNS \u0434\u043e\u043b\u0436\u043d\u0430 \u044f\u0432\u043b\u044f\u0442\u044c\u0441\u044f \u043d\u0435\u043e\u0442\u044a\u0435\u043c\u043b\u0435\u043c\u043e\u0439 \u0447\u0430\u0441\u0442\u044c\u044e \u0435\u0435 \u043f\u043b\u0430\u043d\u0430 \u043f\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044e \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438. \u0421\u043b\u0443\u0436\u0431\u044b \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u0438\u043c\u0435\u043d, \u043f\u0440\u0435\u043e\u0431\u0440\u0430\u0437\u043e\u0432\u044b\u0432\u0430\u044e\u0449\u0438\u0435 \u0438\u043c\u0435\u043d\u0430 \u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u0443\u0437\u043b\u043e\u0432 \u0432 IP-\u0430\u0434\u0440\u0435\u0441\u0430, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442\u0441\u044f \u0431\u0443\u043a\u0432\u0430\u043b\u044c\u043d\u043e \u0432\u0441\u0435\u043c\u0438 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f\u043c\u0438 \u0438 \u0441\u043b\u0443\u0436\u0431\u0430\u043c\u0438 \u0432 \u0441\u0435\u0442\u0438. \u0415\u0441\u043b\u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043f\u043e\u043b\u0443\u0447\u0438\u0442 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 DNS \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438, \u0442\u043e \u0441\u043c\u043e\u0436\u0435\u0442 \u0431\u0435\u0437 \u043f\u0440\u043e\u0431\u043b\u0435\u043c: \u043f\u0435\u0440\u0435\u0434\u0430\u0442\u044c \u0441\u0435\u0431\u0435 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u043d\u0430\u0434 \u0440\u0435\u0441\u0443\u0440\u0441\u0430\u043c\u0438, \u043d\u0430\u0445\u043e\u0434\u044f\u0449\u0438\u043c\u0438\u0441\u044f \u0432 \u043e\u0431\u0449\u0435\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u0435 \u043f\u0435\u0440\u0435\u043d\u0430\u043f\u0440\u0430\u0432\u0438\u0442\u044c \u0432\u0445\u043e\u0434\u044f\u0449\u0438\u0435\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/rukovodstvo-po-bezopasnosti-dns\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 4.9.10\" \/>\n\t\t<meta property=\"og:locale\" content=\"et_EE\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u0420\u0443\u043a\u043e\u0432\u043e\u0434\u0441\u0442\u0432\u043e \u043f\u043e \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 DNS | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u0427\u0435\u043c \u0431\u044b \u043d\u0438 \u0437\u0430\u043d\u0438\u043c\u0430\u043b\u0430\u0441\u044c \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f, \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c DNS \u0434\u043e\u043b\u0436\u043d\u0430 \u044f\u0432\u043b\u044f\u0442\u044c\u0441\u044f \u043d\u0435\u043e\u0442\u044a\u0435\u043c\u043b\u0435\u043c\u043e\u0439 \u0447\u0430\u0441\u0442\u044c\u044e \u0435\u0435 \u043f\u043b\u0430\u043d\u0430 \u043f\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044e \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438. \u0421\u043b\u0443\u0436\u0431\u044b \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u0438\u043c\u0435\u043d, \u043f\u0440\u0435\u043e\u0431\u0440\u0430\u0437\u043e\u0432\u044b\u0432\u0430\u044e\u0449\u0438\u0435 \u0438\u043c\u0435\u043d\u0430 \u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u0443\u0437\u043b\u043e\u0432 \u0432 IP-\u0430\u0434\u0440\u0435\u0441\u0430, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442\u0441\u044f \u0431\u0443\u043a\u0432\u0430\u043b\u044c\u043d\u043e \u0432\u0441\u0435\u043c\u0438 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f\u043c\u0438 \u0438 \u0441\u043b\u0443\u0436\u0431\u0430\u043c\u0438 \u0432 \u0441\u0435\u0442\u0438. \u0415\u0441\u043b\u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043f\u043e\u043b\u0443\u0447\u0438\u0442 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 DNS \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438, \u0442\u043e \u0441\u043c\u043e\u0436\u0435\u0442 \u0431\u0435\u0437 \u043f\u0440\u043e\u0431\u043b\u0435\u043c: \u043f\u0435\u0440\u0435\u0434\u0430\u0442\u044c \u0441\u0435\u0431\u0435 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u043d\u0430\u0434 \u0440\u0435\u0441\u0443\u0440\u0441\u0430\u043c\u0438, \u043d\u0430\u0445\u043e\u0434\u044f\u0449\u0438\u043c\u0438\u0441\u044f \u0432 \u043e\u0431\u0449\u0435\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u0435 \u043f\u0435\u0440\u0435\u043d\u0430\u043f\u0440\u0430\u0432\u0438\u0442\u044c \u0432\u0445\u043e\u0434\u044f\u0449\u0438\u0435\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/rukovodstvo-po-bezopasnosti-dns\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2020-09-15T17:42:32+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2020-09-15T17:42:32+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47DNS-i turbe juhend | ProHoster","description":"\u00dcksk\u00f5ik, millega ettev\u00f5te tegeleb, peab DNS-i turvalisus olema h\u00e4davajalik osa selle turveplaanist. Nimeprotsesside teenuseid, mis muudavad v\u00f5rgu s\u00f5lmede nimed IP-aadressideks, kasutavad sisuliselt k\u00f5ik rakendused ja teenused internetis. Kui r\u00fcndaja saab ettev\u00f5tte DNS-i \u00fcle kontrolli, on tal lihtne: suunata juhtimine alla tasuta t\u00e4iustatud allikate poole.","canonical_url":"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/rukovodstvo-po-bezopasnosti-dns","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0420\u0443\u043a\u043e\u0432\u043e\u0434\u0441\u0442\u0432\u043e \u043f\u043e \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 DNS | ProHoster","og:description":"\u0427\u0435\u043c \u0431\u044b \u043d\u0438 \u0437\u0430\u043d\u0438\u043c\u0430\u043b\u0430\u0441\u044c \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f, \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c DNS \u0434\u043e\u043b\u0436\u043d\u0430 \u044f\u0432\u043b\u044f\u0442\u044c\u0441\u044f \u043d\u0435\u043e\u0442\u044a\u0435\u043c\u043b\u0435\u043c\u043e\u0439 \u0447\u0430\u0441\u0442\u044c\u044e \u0435\u0435 \u043f\u043b\u0430\u043d\u0430 \u043f\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044e \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438. \u0421\u043b\u0443\u0436\u0431\u044b \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u0438\u043c\u0435\u043d, \u043f\u0440\u0435\u043e\u0431\u0440\u0430\u0437\u043e\u0432\u044b\u0432\u0430\u044e\u0449\u0438\u0435 \u0438\u043c\u0435\u043d\u0430 \u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u0443\u0437\u043b\u043e\u0432 \u0432 IP-\u0430\u0434\u0440\u0435\u0441\u0430, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442\u0441\u044f \u0431\u0443\u043a\u0432\u0430\u043b\u044c\u043d\u043e \u0432\u0441\u0435\u043c\u0438 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f\u043c\u0438 \u0438 \u0441\u043b\u0443\u0436\u0431\u0430\u043c\u0438 \u0432 \u0441\u0435\u0442\u0438. \u0415\u0441\u043b\u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043f\u043e\u043b\u0443\u0447\u0438\u0442 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 DNS \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438, \u0442\u043e \u0441\u043c\u043e\u0436\u0435\u0442 \u0431\u0435\u0437 \u043f\u0440\u043e\u0431\u043b\u0435\u043c: \u043f\u0435\u0440\u0435\u0434\u0430\u0442\u044c \u0441\u0435\u0431\u0435 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u043d\u0430\u0434 \u0440\u0435\u0441\u0443\u0440\u0441\u0430\u043c\u0438, \u043d\u0430\u0445\u043e\u0434\u044f\u0449\u0438\u043c\u0438\u0441\u044f \u0432 \u043e\u0431\u0449\u0435\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u0435 \u043f\u0435\u0440\u0435\u043d\u0430\u043f\u0440\u0430\u0432\u0438\u0442\u044c \u0432\u0445\u043e\u0434\u044f\u0449\u0438\u0435","og:url":"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/rukovodstvo-po-bezopasnosti-dns","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-09-15T17:42:32+00:00","article:modified_time":"2020-09-15T17:42:32+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"94321","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 11:29:29","updated":"2022-09-30 08:27:56"},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/94321","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=94321"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/94321\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media\/94322"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=94321"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=94321"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=94321"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}