{"id":90406,"date":"2020-08-01T01:41:57","date_gmt":"2020-07-31T23:41:57","guid":{"rendered":"https:\/\/prohoster.info\/blog\/administrirovanie\/chto-takoe-dns-tunnelirovanie-instrukcziya-po-obnaruzheniyu"},"modified":"2020-08-01T01:41:57","modified_gmt":"2020-07-31T23:41:57","slug":"chto-takoe-dns-tunnelirovanie-instrukcziya-po-obnaruzheniyu","status":"publish","type":"post","link":"https:\/\/prohoster.info\/ro\/blog\/administrirovanie\/chto-takoe-dns-tunnelirovanie-instrukcziya-po-obnaruzheniyu","title":{"rendered":"Ce este tunelarea DNS? Instruc\u021biuni pentru detectare","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p><img decoding=\"async\" alt=\"Ce este tunelarea DNS? Instruc\u021biuni pentru detectare\" src=\"\/wp-content\/uploads\/2020\/07\/f2bfcb839356ceed6ff0c8d47cec3497.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nTunelarea DNS transform\u0103 sistemul de nume de domenii \u00eentr-o arm\u0103 pentru hackeri. DNS este, \u00een esen\u021b\u0103, un enorm caiet de telefoane pentru internet. De asemenea, DNS este un protocol de baz\u0103 care permite administratorilor s\u0103 fac\u0103 cereri c\u0103tre baza de date a serverului DNS. P\u00e2n\u0103 acum totul pare clar. Dar hackerii iste\u021bi au realizat c\u0103 pot comunica discret cu computerul-victim\u0103 prin inserarea comenzilor de control \u0219i a datelor \u00een protocolul DNS. Aceast\u0103 idee st\u0103 la baza tunel\u0103rii DNS.<br \/>\n<noindex><a rel=\"nofollow\" name=\"habracut\"><\/a><\/noindex><\/p>\n<h2> Cum func\u021bioneaz\u0103 tunelarea DNS<\/h2>\n<p>\n<img decoding=\"async\" alt=\"Ce este tunelarea DNS? Instruc\u021biuni pentru detectare\" src=\"\/wp-content\/uploads\/2020\/07\/f19bf65f1c0eba1326b5eaa4363b7c94.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nPentru fiecare lucru pe internet exist\u0103 un protocol specific. \u0218i DNS suport\u0103 un tip relativ simplu <noindex><a rel=\"nofollow\" href=\"https:\/\/www.verisign.com\/en_US\/website-presence\/online\/how-dns-works\/index.xhtml\">protocol <\/a><\/noindex>de cerere-r\u0103spuns. Dac\u0103 dori\u021bi s\u0103 vede\u021bi cum func\u021bioneaz\u0103, pute\u021bi rula nslookup \u2013 instrumentul principal pentru trimiterea cererilor DNS. Pute\u021bi solicita o adres\u0103, indic\u00e2nd pur \u0219i simplu numele de domeniu de interes, de exemplu:<\/p>\n<p><img decoding=\"async\" alt=\"Ce este tunelarea DNS? Instruc\u021biuni pentru detectare\" src=\"\/wp-content\/uploads\/2020\/07\/0125acad0c2431eccbc0ea21b9b854fe.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\n\u00cen cazul nostru, protocolul a r\u0103spuns cu adresa IP a domeniului. \u00cen termeni ai protocolului DNS, am f\u0103cut o cerere de adres\u0103 sau o cerere de tipul \"A\". Exist\u0103 \u0219i alte tipuri de cereri, iar protocolul DNS va r\u0103spunde cu un set diferit de c\u00e2mpuri de date, pe care, dup\u0103 cum vom vedea mai t\u00e2rziu, le pot folosi hackerii.<\/p>\n<p>Indiferent de situa\u021bie, \u00een esen\u021ba sa, protocolul DNS se ocup\u0103 de transmiterea cererii c\u0103tre server \u0219i a r\u0103spunsului \u00eenapoi c\u0103tre client. Dar ce s-ar \u00eent\u00e2mpla dac\u0103 un atacator ar ad\u0103uga un mesaj mascat \u00een cererea de nume de domeniu? De exemplu, \u00een loc s\u0103 introduc\u0103 o adres\u0103 URL legitim\u0103, ar introduce datele pe care vrea s\u0103 le transmit\u0103:<\/p>\n<p><img decoding=\"async\" alt=\"Ce este tunelarea DNS? Instruc\u021biuni pentru detectare\" src=\"\/wp-content\/uploads\/2020\/07\/676fc6d7878912b590e315b1664565ce.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nS\u0103 presupunem c\u0103 atacatorul controleaz\u0103 serverul DNS. Atunci poate transmite date \u2013 de exemplu, date personale \u2013 \u0219i nu va fi neap\u0103rat detectat. La urma urmei, de ce ar deveni o cerere DNS ceva ilegal? <\/p>\n<p>Control\u00e2nd serverul, hackerii pot falsifica r\u0103spunsurile \u0219i pot trimite date \u00eenapoi c\u0103tre sistemul \u021bint\u0103. Aceasta le permite s\u0103 transmit\u0103 mesaje, ascunse \u00een diverse c\u00e2mpuri ale r\u0103spunsului DNS, c\u0103tre malware-ul de pe ma\u0219ina infectat\u0103, cu instruc\u021biuni de genul c\u0103ut\u0103rii \u00eentr-un anumit folder.<\/p>\n<p>Partea \"tunelatoare\" a acestei atacuri const\u0103 \u00een <noindex><a rel=\"nofollow\" href=\"https:\/\/www.varonis.com\/blog\/powershell-obfuscation-stealth-through-confusion-part-i\/\">\u00eencercarea de a ascunde <\/a><\/noindex> datele \u0219i comenzile de detectarea sistemelor de monitorizare. Hackerii pot folosi seturi de caractere base32, base64 etc., sau chiar pot cifra datele. O astfel de codare va trece neobservat\u0103 de simplele instrumente de detectare a amenin\u021b\u0103rilor care caut\u0103 \u00een textul deschis.<\/p>\n<p>\u0218i acesta este tunelarea DNS!<\/p>\n<h2> Istoria atacurilor prin tunelarea DNS<\/h2>\n<p>\nTotul are un \u00eenceput, inclusiv ideea de capturare a protocolului DNS \u00een scopuri r\u0103u inten\u021bionate. Din c\u00e2te putem judeca, primul <noindex><a rel=\"nofollow\" href=\"https:\/\/groups.google.com\/forum\/#!msg\/muc.lists.bugtraq\/Myj1gKWzCAY\/QI6BrCtG7cgJ\">s-a dezactivat <\/a><\/noindex>astfel de atac a fost efectuat de Oskar Pearson \u00een mailing list-ul Bugtraq \u00een aprilie 1998.<\/p>\n<p>P\u00e2n\u0103 \u00een 2004, tunelarea DNS a fost prezentat\u0103 la Black Hat ca o metod\u0103 de hacking \u00een prezentarea lui Dan Kaminsky. Astfel, ideea a crescut rapid \u00een un adev\u0103rat instrument de atac.<\/p>\n<p>Ast\u0103zi, tunelarea DNS \u00ee\u0219i ocup\u0103 pozi\u021bii ferme pe harta <noindex><a rel=\"nofollow\" href=\"https:\/\/www.securityweek.com\/iranian-hackers-heavily-reliant-dns-tunneling\">amenin\u021b\u0103rilor poten\u021biale <\/a><\/noindex>(iar bloggerii din domeniul securit\u0103\u021bii informa\u021biei sunt adesea ruga\u021bi s\u0103 o explice).<\/p>\n<p>A\u021bi auzit de <noindex><a rel=\"nofollow\" href=\"https:\/\/blog.talosintelligence.com\/2019\/04\/seaturtle.html\">Sea Turtle <\/a><\/noindex>? \u042d\u0442\u043e \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0449\u0430\u044f \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u044f \u043a\u0438\u0431\u0435\u0440\u043f\u0440\u0435\u0441\u0442\u0443\u043f\u043d\u044b\u0445 \u0433\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u043e\u043a \u2014 \u0441\u043a\u043e\u0440\u0435\u0435 \u0432\u0441\u0435\u0433\u043e, \u0441\u043f\u043e\u043d\u0441\u0438\u0440\u0443\u0435\u043c\u0430\u044f \u0433\u043e\u0441\u0443\u0434\u0430\u0440\u0441\u0442\u0432\u043e\u043c, \u2014 \u043d\u0430\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u0430\u044f \u043d\u0430 \u0437\u0430\u0445\u0432\u0430\u0442 \u043b\u0435\u0433\u0438\u0442\u0438\u043c\u043d\u044b\u0445 DNS-\u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 \u0441 \u0446\u0435\u043b\u044c\u044e \u043f\u0435\u0440\u0435\u043d\u0430\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f DNS-\u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432 \u043d\u0430 \u0441\u043e\u0431\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0435 \u0441\u0435\u0440\u0432\u0435\u0440\u0430. \u042d\u0442\u043e \u043e\u0437\u043d\u0430\u0447\u0430\u0435\u0442, \u0447\u0442\u043e \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0431\u0443\u0434\u0443\u0442 \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u00ab\u043f\u043b\u043e\u0445\u0438\u0435\u00bb IP-\u0430\u0434\u0440\u0435\u0441\u0430, \u0443\u043a\u0430\u0437\u044b\u0432\u0430\u044e\u0449\u0438\u0435 \u043d\u0430 \u043f\u043e\u0434\u0434\u0435\u043b\u044c\u043d\u044b\u0435 \u0432\u0435\u0431-\u0441\u0442\u0440\u0430\u043d\u0438\u0446\u044b \u043f\u043e\u0434 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435\u043c \u0445\u0430\u043a\u0435\u0440\u043e\u0432, \u2014 \u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, Google \u0438\u043b\u0438 FedEx. \u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0441\u043c\u043e\u0433\u0443\u0442 \u0437\u0430\u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0443\u0447\u0451\u0442\u043d\u044b\u0435 \u0437\u0430\u043f\u0438\u0441\u0438 \u0438 \u043f\u0430\u0440\u043e\u043b\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0442\u0435 \u043d\u0435\u043e\u0441\u043e\u0437\u043d\u0430\u043d\u043d\u043e \u0432\u0432\u0435\u0434\u0443\u0442 \u0438\u0445 \u043d\u0430 \u0442\u0430\u043a\u0438\u0445 \u043f\u043e\u0434\u0434\u0435\u043b\u044c\u043d\u044b\u0445 \u0441\u0430\u0439\u0442\u0430\u0445. \u042d\u0442\u043e \u043d\u0435 DNS-\u0442\u0443\u043d\u043d\u0435\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435, \u043d\u043e \u043f\u0440\u043e\u0441\u0442\u043e \u0435\u0449\u0451 \u043e\u0434\u043d\u043e \u0441\u043a\u0432\u0435\u0440\u043d\u043e\u0435 \u043f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u0435 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044f DNS-\u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 \u0445\u0430\u043a\u0435\u0440\u0430\u043c\u0438.<\/p>\n<h2> Amenin\u021b\u0103rile tunel\u0103rii DNS<\/h2>\n<p>\n<img decoding=\"async\" alt=\"Ce este tunelarea DNS? Instruc\u021biuni pentru detectare\" src=\"\/wp-content\/uploads\/2020\/07\/368dcf4cbd442f994cb3385788f0bbd2.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nTunelarea DNS este ca un indicator al \u00eenceputului unei etape de \u0219tiri proaste. Care anume? Am discutat deja despre c\u00e2teva, dar haide\u021bi s\u0103 le structur\u0103m:<\/p>\n<ul>\n<li><strong>Exfiltrarea de date<\/strong> \u2013 hackerii transmit \u00een secret date critice prin intermediul DNS. Acesta nu este cu siguran\u021b\u0103 cel mai eficient mod de a transmite informa\u021bii de pe computerul victimei \u2014 av\u00e2nd \u00een vedere toate costurile \u0219i cod\u0103rile \u2014 dar func\u021bioneaz\u0103, \u0219i totodat\u0103 \u2013 \u00een mod secret!<\/li>\n<li><strong>Comand\u0103 \u0219i control (Command and Control, prescurtat C2)<\/strong> \u2013 hackerii folosesc protocolul DNS pentru a trimite comenzi simple de control, s\u0103 zicem, prin intermediul <noindex><a rel=\"nofollow\" href=\"https:\/\/www.varonis.com\/blog\/koadic-lol-malware-meets-python-based-command-and-control-c2-server-part-i\/\">troianului de acces la distan\u021b\u0103 <\/a><\/noindex>(Remote Access Trojan, prescurtat RAT).<\/li>\n<li><strong>Tunelarea IP-Over-DNS <\/strong>\u2013 poate suna nebune\u0219te, dar exist\u0103 utilitare care implementeaz\u0103 stiva IP peste cererile \u0219i r\u0103spunsurile protocolului DNS. Acest lucru face ca transmiterea de date prin FTP, Netcat, ssh etc. s\u0103 fie o sarcin\u0103 relativ simpl\u0103. Extrem de sinistru!<\/li>\n<\/ul>\n<p><\/p>\n<h2>Detectarea tunel\u0103rii DNS<\/h2>\n<p>\n<img decoding=\"async\" alt=\"Ce este tunelarea DNS? Instruc\u021biuni pentru detectare\" src=\"\/wp-content\/uploads\/2020\/07\/8e182ef5a3d5be38b27f79317008ca0f.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nExist\u0103 dou\u0103 metode principale de detectare a abuzului de DNS: analiza \u00eenc\u0103rc\u0103turii \u0219i analiza traficului.<\/p>\n<p>Upon <strong>analiza \u00eenc\u0103rc\u0103turii <\/strong> partea ap\u0103rat\u0103 caut\u0103 anomalii \u00een datele transmise \u00een ambele sensuri, care pot fi detectate prin metode statistice: nume de gazde ciudate, tipuri de \u00eenregistr\u0103ri DNS care nu sunt folosite at\u00e2t de des sau cod\u0103ri neobi\u0219nuite.<\/p>\n<p>Upon <strong>analiza traficului <\/strong>evaluaz\u0103 num\u0103rul cererilor DNS c\u0103tre fiecare domeniu \u00een compara\u021bie cu nivelul mediu. Atacatorii care folosesc tunelarea DNS vor genera un volum mare de trafic c\u0103tre server. \u00cen teorie, acest volum va dep\u0103\u0219i semnificativ schimbul normal de mesaje DNS. \u0218i este necesar s\u0103 se urm\u0103reasc\u0103! <\/p>\n<h3>Utilitare de tunelare DNS<\/h3>\n<p>\nDac\u0103 dori\u021bi s\u0103 efectua\u021bi un test de penetrare pe cont propriu \u0219i s\u0103 verifica\u021bi c\u00e2t de bine poate compania dumneavoastr\u0103 s\u0103 detecteze \u0219i s\u0103 reac\u021bioneze la o astfel de activitate, exist\u0103 mai multe utilitare disponibile. Toate acestea pot tunela \u00een modul <em>IP-Over-DNS<\/em>:<\/p>\n<ul>\n<li><noindex><a rel=\"nofollow\" href=\"https:\/\/code.kryo.se\/iodine\/\">Iodine <\/a><\/noindex>\u2013 disponibil pe multe platforme (Linux, Mac OS, FreeBSD \u0219i Windows). Permite stabilirea unui SSH shell \u00eentre computerul \u021bint\u0103 \u0219i cel de control. Iat\u0103 un ghid decent <noindex><a rel=\"nofollow\" href=\"https:\/\/calebmadrigal.com\/dns-tunneling-with-iodine\/\">ghid <\/a><\/noindex>pentru configurarea \u0219i utilizarea Iodine.<\/li>\n<li><noindex><a rel=\"nofollow\" href=\"https:\/\/dankaminsky.com\/?s=ozymandns\">OzymanDNS<\/a><\/noindex> \u2013 un proiect de tunelare DNS creat de Dan Kaminsky, scris \u00een Perl. Acesta permite conectarea prin SSH.<\/li>\n<li><noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/iagox86\/dnscat2\">DNSCat2 <\/a><\/noindex>\u2013 \u201etunel DNS care nu provoac\u0103 grea\u021b\u0103\u201d. Creeaz\u0103 un canal C2 cifrat pentru trimiterea\/desc\u0103rcarea fi\u0219ierelor, pornirea shell-urilor etc.<\/li>\n<\/ul>\n<p><\/p>\n<h3>Utilitare de monitorizare DNS<\/h3>\n<p>\nMai jos se afl\u0103 o list\u0103 a unor utilitare care vor fi utile pentru detectarea atacurilor de tunelare:<\/p>\n<ul>\n<li><noindex><a rel=\"nofollow\" href=\"https:\/\/hunttools.gitbooks.io\/mercenary-linux\/content\/dnshunter_module.html\">dnsHunter<\/a><\/noindex> \u2013 modul Python, scris pentru MercenaryHuntFramework \u0219i Mercenary-Linux. Cite\u0219te fi\u0219iere .pcap, extrage cererile DNS \u0219i efectueaz\u0103 asocierea geoloca\u021biei, ajut\u00e2nd astfel la analiz\u0103.<\/li>\n<li><noindex><a rel=\"nofollow\" href=\"https:\/\/www.vs.uni-due.de\/wander\/reassemble_dns\/\">reassemble_dns <\/a><\/noindex>\u2013 utilitar Python care cite\u0219te fi\u0219iere .pcap \u0219i analizeaz\u0103 mesajele DNS.<\/li>\n<\/ul>\n<p><\/p>\n<h2>Micro FAQ despre tunelarea DNS<\/h2>\n<p>\nInforma\u021bii utile sub form\u0103 de \u00eentreb\u0103ri \u0219i r\u0103spunsuri!<\/p>\n<p><strong>\u00ce: Ce este tunelarea?<\/strong><br \/>\n<strong>R:<\/strong> Este pur \u0219i simplu o metod\u0103 de transfer de date deasupra unui protocol existent. Protocolul de baz\u0103 asigur\u0103 un canal sau tunel dedicat, care este apoi utilizat pentru a ascunde informa\u021biile transmise efectiv.<\/p>\n<p><strong>\u00ce: C\u00e2nd a avut loc primul atac prin tunelare DNS?<\/strong><br \/>\n<strong>R: <\/strong> Nu \u0219tim! Dac\u0103 \u0219ti\u021bi, v\u0103 rug\u0103m s\u0103 ne comunica\u021bi. Din c\u00e2te \u0219tim, prima discu\u021bie despre atac a fost ini\u021biat\u0103 de Oscar Pearson pe lista de discu\u021bii Bugtraq \u00een aprilie 1998.<\/p>\n<p><strong>\u00ce: Ce atacuri sunt similare cu tunelarea DNS?<\/strong><br \/>\n<strong>R: <\/strong>DNS nu este singurul protocol care poate fi folosit pentru tunelare. De exemplu, malware-urile de gestionare \u0219i control (C2) folosesc adesea HTTP pentru a masca canalul de interac\u021biune. La fel ca \u00een tunelarea DNS, hackerul \u00ee\u0219i ascunde datele, dar \u00een acest caz, ele arat\u0103 ca traficul unui browser web obi\u0219nuit care acceseaz\u0103 un site de la distan\u021b\u0103 (controlat de atacator). Aceasta poate trece neobservat de programele de monitorizare, dac\u0103 acestea nu sunt configurate s\u0103 perceap\u0103 <noindex><a rel=\"nofollow\" href=\"https:\/\/attack.mitre.org\/tactics\/TA0011\/\">amenin\u021barea <\/a><\/noindex>abuzuri ale protocolului HTTP \u00een scopuri de hacking.<\/p>\n<p>Dori\u021bi s\u0103 v\u0103 ajut\u0103m cu detectarea tunel\u0103rii DNS? Consulta\u021bi modul nostru <noindex><a rel=\"nofollow\" href=\"https:\/\/www.varonis.com\/ru\/products-edge\/\"> Varonis Edge <\/a><\/noindex>\u0219i \u00eencerca\u021bi-l gratuit <noindex><a rel=\"nofollow\" href=\"https:\/\/info.varonis.com\/demo\/ru\"> demo<\/a><\/noindex>!<br \/>\n<br \/>Sursa: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/varonis\/blog\/513160\/\">habr.com<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>DNS-\u0442\u0443\u043d\u043d\u0435\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u043f\u0440\u0435\u0432\u0440\u0430\u0449\u0430\u0435\u0442 \u0441\u0438\u0441\u0442\u0435\u043c\u0443 \u0434\u043e\u043c\u0435\u043d\u043d\u044b\u0445 \u0438\u043c\u0451\u043d \u0432 \u043e\u0440\u0443\u0436\u0438\u0435 \u0445\u0430\u043a\u0435\u0440\u043e\u0432. DNS \u2013 \u044d\u0442\u043e, \u043f\u043e \u0441\u0443\u0442\u0438, \u043e\u0433\u0440\u043e\u043c\u043d\u0430\u044f \u0442\u0435\u043b\u0435\u0444\u043e\u043d\u043d\u0430\u044f \u043a\u043d\u0438\u0433\u0430 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0430. \u0410 \u0435\u0449\u0451 DNS \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0431\u0430\u0437\u043e\u0432\u044b\u043c \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u043e\u043c, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u043c \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430\u043c \u0434\u0435\u043b\u0430\u0442\u044c \u0437\u0430\u043f\u0440\u043e\u0441\u044b \u0432 \u0431\u0430\u0437\u0443 \u0434\u0430\u043d\u043d\u044b\u0445 DNS-\u0441\u0435\u0440\u0432\u0435\u0440\u0430. \u041f\u043e\u043a\u0430 \u0432\u0440\u043e\u0434\u0435 \u0432\u0441\u0451 \u043f\u043e\u043d\u044f\u0442\u043d\u043e. \u041d\u043e \u0445\u0438\u0442\u0440\u044b\u0435 \u0445\u0430\u043a\u0435\u0440\u044b \u043e\u0441\u043e\u0437\u043d\u0430\u043b\u0438, \u0447\u0442\u043e \u043c\u043e\u0436\u043d\u043e \u0441\u043a\u0440\u044b\u0442\u043d\u043e \u043e\u0431\u0449\u0430\u0442\u044c\u0441\u044f \u0441 \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440\u043e\u043c-\u0436\u0435\u0440\u0442\u0432\u043e\u0439 \u043f\u0443\u0442\u0451\u043c \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044f \u0443\u043f\u0440\u0430\u0432\u043b\u044f\u044e\u0449\u0438\u0445 \u043a\u043e\u043c\u0430\u043d\u0434 \u0438 \u0434\u0430\u043d\u043d\u044b\u0445 \u0432 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b DNS. \u042d\u0442\u0430 [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":90407,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-90406","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.2.1 - aioseo.com -->\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/ro\/blog\/administrirovanie\/chto-takoe-dns-tunnelirovanie-instrukcziya-po-obnaruzheniyu\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.2.1\" \/>\n\t\t<meta property=\"og:locale\" content=\"ro_RO\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u0427\u0442\u043e \u0442\u0430\u043a\u043e\u0435 DNS-\u0442\u0443\u043d\u043d\u0435\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435? \u0418\u043d\u0441\u0442\u0440\u0443\u043a\u0446\u0438\u044f \u043f\u043e \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u044e | ProHoster\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/ro\/blog\/administrirovanie\/chto-takoe-dns-tunnelirovanie-instrukcziya-po-obnaruzheniyu\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2020-07-31T23:41:57+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2020-07-31T23:41:57+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Ce este tunelarea DNS? Instruc\u021biuni pentru detectare | ProHoster","description":"","canonical_url":"https:\/\/prohoster.info\/ro\/blog\/administrirovanie\/chto-takoe-dns-tunnelirovanie-instrukcziya-po-obnaruzheniyu","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"ro_RO","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0427\u0442\u043e \u0442\u0430\u043a\u043e\u0435 DNS-\u0442\u0443\u043d\u043d\u0435\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435? \u0418\u043d\u0441\u0442\u0440\u0443\u043a\u0446\u0438\u044f \u043f\u043e \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u044e | ProHoster","og:url":"https:\/\/prohoster.info\/ro\/blog\/administrirovanie\/chto-takoe-dns-tunnelirovanie-instrukcziya-po-obnaruzheniyu","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-07-31T23:41:57+00:00","article:modified_time":"2020-07-31T23:41:57+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"90406","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 12:52:33","updated":"2022-09-29 17:04:38","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/90406","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/comments?post=90406"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/90406\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media\/90407"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media?parent=90406"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/categories?post=90406"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/tags?post=90406"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}