{"id":94321,"date":"2020-09-15T19:42:32","date_gmt":"2020-09-15T17:42:32","guid":{"rendered":"https:\/\/prohoster.info\/blog\/administrirovanie\/rukovodstvo-po-bezopasnosti-dns"},"modified":"2020-09-15T19:42:32","modified_gmt":"2020-09-15T17:42:32","slug":"rukovodstvo-po-bezopasnosti-dns","status":"publish","type":"post","link":"https:\/\/prohoster.info\/ro\/blog\/administrirovanie\/rukovodstvo-po-bezopasnosti-dns","title":{"rendered":"Ghid de securitate DNS","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p><img decoding=\"async\" alt=\"Ghid de securitate DNS\" src=\"\/wp-content\/uploads\/2020\/09\/e29223def3c7c13eaa45a24967d6bba0.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nIndiferent de activitatea desf\u0103\u0219urat\u0103 de companie, securitatea <noindex><a rel=\"nofollow\" href=\"https:\/\/www.varonis.com\/blog\/what-is-dns\/\"> DNS <\/a><\/noindex>trebuie s\u0103 fie o parte integrant\u0103 a planului s\u0103u de securitate. Serviciile de gestionare a numelui, care transform\u0103 numele nodurilor de re\u021bea \u00een adrese IP, sunt utilizate de toate aplica\u021biile \u0219i serviciile din re\u021bea.<\/p>\n<p><strong>Dac\u0103 un atacator preia controlul asupra DNS-ului organiza\u021biei, va putea f\u0103r\u0103 probleme:<\/strong><\/p>\n<ul>\n<li>s\u0103 preia controlul asupra resurselor accesibile publicului<\/li>\n<li>s\u0103 redirec\u021bioneze e-mailurile primite, precum \u0219i solicit\u0103rile web \u0219i \u00eencerc\u0103rile de autentificare<\/li>\n<li>s\u0103 creeze \u0219i s\u0103 valideze certificate SSL\/TLS<\/li>\n<\/ul>\n<p>\n<strong>Acest ghid examineaz\u0103 securitatea DNS din dou\u0103 perspective:<\/strong><\/p>\n<ol>\n<li>Implementarea unei monitoriz\u0103ri \u0219i control constant asupra DNS-ului<\/li>\n<li>Cum noile protocoale DNS, cum ar fi DNSSEC, DoH \u0219i DoT, pot ajuta la protejarea integrit\u0103\u021bii \u0219i confiden\u021bialit\u0103\u021bii cererilor DNS transmise<\/li>\n<\/ol>\n<p>\n<noindex><a rel=\"nofollow\" name=\"habracut\"><\/a><\/noindex><\/p>\n<h2> Ce este securitatea DNS? <\/h2>\n<p>\n<img decoding=\"async\" alt=\"Ghid de securitate DNS\" src=\"\/wp-content\/uploads\/2020\/09\/6367857de248c9ee9435f8ec079600be.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<h3> Conceptul de securitate DNS include dou\u0103 componente importante:<\/h3>\n<p><\/p>\n<ol>\n<li>Asigurarea integrit\u0103\u021bii generale \u0219i disponibilit\u0103\u021bii serviciilor DNS, care transform\u0103 numele nodurilor de re\u021bea \u00een adrese IP<\/li>\n<li>Monitorizarea activit\u0103\u021bii DNS pentru a identifica posibile probleme de securitate \u00een re\u021beaua dumneavoastr\u0103<\/li>\n<\/ol>\n<h3> De ce este DNS vulnerabil la atacuri? <\/h3>\n<p>\nTehnologia DNS a fost creat\u0103 la \u00eenceputurile internetului, cu mult \u00eenainte ca cineva s\u0103 \u00eenceap\u0103 s\u0103 se g\u00e2ndeasc\u0103 la securitatea re\u021belei. DNS func\u021bioneaz\u0103 f\u0103r\u0103 autentificare \u0219i criptare, gestion\u00e2nd f\u0103r\u0103 discern\u0103m\u00e2nt cererile oric\u0103rui utilizator.<\/p>\n<p>Din acest motiv, exist\u0103 numeroase modalit\u0103\u021bi de a \u00een\u0219ela utilizatorul \u0219i de a falsifica informa\u021bii despre unde se efectueaz\u0103 de fapt transformarea numelui \u00een adrese IP.<\/p>\n<h2> Securitatea DNS: \u00eentreb\u0103ri \u0219i componente<\/h2>\n<p>\n<img decoding=\"async\" alt=\"Ghid de securitate DNS\" src=\"\/wp-content\/uploads\/2020\/09\/45d61ac4004631a2602518a3d4a51c3c.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nSecuritatea DNS const\u0103 \u00eentr-o serie de aspecte fundamentale <em>componentelor<\/em>, fiecare dintre acestea trebuie s\u0103 fie luat \u00een considerare pentru a asigura o protec\u021bie adecvat\u0103:<\/p>\n<ul>\n<li><strong>\u00cembun\u0103t\u0103\u021birea securit\u0103\u021bii serverelor \u0219i a procedurilor de management:<\/strong> \u00eembun\u0103t\u0103\u021bi\u021bi nivelul de protec\u021bie al serverelor \u0219i crea\u021bi un \u0219ablon standard pentru implementare<\/li>\n<li><strong>\u00cembun\u0103t\u0103\u021birea protocoalelor:<\/strong> implementa\u021bi DNSSEC, DoT sau DoH<\/li>\n<li><strong>Analiz\u0103 \u0219i raportare: <\/strong>ad\u0103uga\u021bi jurnalul de evenimente DNS \u00een sistemul SIEM pentru un context suplimentar \u00een investigarea incidentelor<\/li>\n<li><strong>Inteligen\u021ba cibernetic\u0103 \u0219i detectarea amenin\u021b\u0103rilor:<\/strong> abona\u021bi-v\u0103 la un canal activ pentru a primi date analitice despre amenin\u021b\u0103ri<\/li>\n<li><strong>Automatizare: <\/strong>crea\u021bi c\u00e2t mai multe scenarii posibile pentru a automatiza procesele<\/li>\n<\/ul>\n<p>\nComponentele de nivel \u00eenalt men\u021bionate mai sus sunt doar v\u00e2rful icebergului \u00een securitatea DNS. \u00cen urm\u0103toarea sec\u021biune, vom analiza mai \u00een detaliu utiliz\u0103rile specifice \u0219i cele mai bune practici pe care trebuie s\u0103 le cunoa\u0219te\u021bi.<\/p>\n<h2> Atacuri DNS<\/h2>\n<p>\n<img decoding=\"async\" alt=\"Ghid de securitate DNS\" src=\"\/wp-content\/uploads\/2020\/09\/f44708ad51b13385aa5ce10629944ecc.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<ul>\n<li><strong><noindex><a rel=\"nofollow\" href=\"https:\/\/www.varonis.com\/blog\/dns-cache-poisoning\/\">falsificarea DNS sau \u00ab\u00eentoxicarea\u00bb cache-ului<\/a><\/noindex>: <\/strong> exploatarea unei vulnerabilit\u0103\u021bi a sistemului pentru a controla cache-ul DNS \u00een scopul redirec\u021bion\u0103rii utilizatorilor altundeva<\/li>\n<li><strong><noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/varonis\/blog\/513160\/\">tunelarea DNS<\/a><\/noindex>: <\/strong>utilizat\u0103 \u00een principal pentru a ocoli m\u0103surile de protec\u021bie \u00eempotriva conexiunilor de la distan\u021b\u0103<\/li>\n<li><strong>interceptarea DNS: <\/strong>redirec\u021bionarea traficului DNS obi\u0219nuit c\u0103tre un alt server DNS \u021bint\u0103 prin modificarea registrarului de domenii<\/li>\n<li><strong>atacul NXDOMAIN: <\/strong>realizarea unui atac DDoS asupra unui server DNS autoritar prin trimiterea de cereri de domeniu ilicite pentru a ob\u021bine un r\u0103spuns for\u021bat<\/li>\n<li><strong>domeniu fantom: <\/strong> \u00eendeamn\u0103 rezolvatorul DNS s\u0103 a\u0219tepte un r\u0103spuns de la domenii inexistente, ceea ce duce la sc\u0103derea performan\u021bei<\/li>\n<li><strong>atacul pe subdomenii aleatorii: <\/strong> hijackerii \u0219i botneturile desf\u0103\u0219oar\u0103 un atac DDoS asupra unui domeniu valid, dar concentreaz\u0103 focul asupra subdomeniilor false pentru a for\u021ba serverul DNS s\u0103 efectueze c\u0103ut\u0103ri de \u00eenregistr\u0103ri \u0219i s\u0103 preia controlul asupra serviciului<\/li>\n<li><strong>blocarea domeniului: <\/strong> const\u0103 \u00een trimiterea de foarte multe r\u0103spunsuri de spam pentru a bloca resursele serverului DNS<\/li>\n<li><strong>atacul botnet-ului de pe echipamentele abonatului: <\/strong> o colectivitate de computere, modems, routere \u0219i alte dispozitive, concentr\u00e2nd puterea de calcul asupra unui anumit site web pentru a-l supra\u00eenc\u0103rca cu cereri de trafic<\/li>\n<\/ul>\n<p><\/p>\n<h3> Atacuri care folosesc DNS<\/h3>\n<p>\nAtacuri care, \u00een vreun fel, folosesc DNS pentru a ataca alte sisteme (adic\u0103, modificarea \u00eenregistr\u0103rilor DNS nu este scopul final):<\/p>\n<ul>\n<li>Fast-Flux<\/li>\n<li>Re\u021bele Flux singulare<\/li>\n<li>Re\u021bele Flux duble<\/li>\n<li><noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/varonis\/blog\/513160\/\">tunelarea DNS<\/a><\/noindex> <\/li>\n<\/ul>\n<p><\/p>\n<h3> Atacuri DNS<\/h3>\n<p>\nAtacuri care, \u00een urma c\u0103rora serverul DNS returneaz\u0103 adresa IP dorit\u0103 de atacator:<\/p>\n<ul>\n<li>Falsificarea DNS sau \u00ab\u00eentoxicarea\u00bb cache-ului<\/li>\n<li>Interceptarea DNS<\/li>\n<\/ul>\n<p><\/p>\n<h2> Ce este DNSSEC?<\/h2>\n<p><img decoding=\"async\" alt=\"Ghid de securitate DNS\" src=\"\/wp-content\/uploads\/2020\/09\/929b6e632135bd1b059e403e7b4ddab8.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nDNSSEC - modulele de securitate ale serviciului de nume de domeniu - sunt utilizate pentru a verifica \u00eenregistr\u0103rile DNS f\u0103r\u0103 a necesita cunoa\u0219terea informa\u021biilor generale pentru fiecare cerere DNS specific\u0103.<\/p>\n<p>DNSSEC utilizeaz\u0103 chei de semn\u0103tur\u0103 digital\u0103 (PKI) pentru a confirma dac\u0103 rezultatele cererii de nume de domeniu provin dintr-o surs\u0103 permis\u0103.<br \/>\nImplementarea DNSSEC nu este doar cea mai bun\u0103 practic\u0103 din industrie, ci ajut\u0103 de asemenea la evitarea eficient\u0103 a majorit\u0103\u021bii atacurilor asupra DNS-ului.<\/p>\n<h4>Principiul de func\u021bionare al DNSSEC<\/h4>\n<p>\nDNSSEC func\u021bioneaz\u0103 similar cu TLS\/HTTPS, folosind perechi de chei publice \u0219i private pentru semnarea digital\u0103 a \u00eenregistr\u0103rilor DNS. Prezentare general\u0103 a procesului:<\/p>\n<ol>\n<li>\u00cenregistr\u0103rile DNS sunt semnate cu o pereche de chei private \u0219i publice<\/li>\n<li>R\u0103spunsurile la solicit\u0103rile DNSSEC con\u021bin \u00eenregistrarea solicitat\u0103, precum \u0219i semn\u0103tura \u0219i cheia public\u0103<\/li>\n<li>Apoi <noindex><a rel=\"nofollow\" href=\"https:\/\/www.varonis.com\/blog\/pgp-encryption\/\">cheia public\u0103 <\/a><\/noindex>este utilizat\u0103 pentru a compara autenticitatea \u00eenregistr\u0103rii \u0219i a semn\u0103turii<\/li>\n<\/ol>\n<h2> Securitatea DNS \u0219i DNSSEC<\/h2>\n<p>\n<img decoding=\"async\" alt=\"Ghid de securitate DNS\" src=\"\/wp-content\/uploads\/2020\/09\/3bd1d530634e82ed6d80040a1d207ff0.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nDNSSEC este un instrument pentru verificarea integrit\u0103\u021bii solicit\u0103rilor DNS. Nu influen\u021beaz\u0103 confiden\u021bialitatea DNS. Cu alte cuvinte, DNSSEC \u00ee\u021bi poate oferi \u00eencredere c\u0103 r\u0103spunsul la solicitarea ta DNS nu este falsificat, dar orice atacator poate vedea aceste rezultate exact a\u0219a cum \u021bi-au fost transmise.<\/p>\n<h2> DoT \u2014 DNS peste TLS<\/h2>\n<p>\nTransport Layer Security (securitate la nivel de transport, TLS) este un protocol criptografic pentru protejarea informa\u021biilor transmise printr-o conexiune de re\u021bea. Odat\u0103 ce a fost stabilit\u0103 o conexiune sigur\u0103 TLS \u00eentre client \u0219i server, datele transmise sunt criptate \u0219i niciun intermediar nu le poate vedea.<\/p>\n<p><noindex><a rel=\"nofollow\" href=\"https:\/\/www.varonis.com\/blog\/tls-vs-ssl\/\">TLS <\/a><\/noindex>cel mai des folosit ca parte a HTTPS (SSL) \u00een browserul t\u0103u web, deoarece solicit\u0103rile sunt trimise c\u0103tre servere HTTP sigure.<\/p>\n<p>DNS-over-TLS (DNS peste TLS, DoT) folose\u0219te protocolul TLS pentru criptarea traficului UDP al solicit\u0103rilor DNS obi\u0219nuite.<br \/>\nCriptarea acestor solicit\u0103ri \u00een format text simplu ajut\u0103 la protejarea utilizatorilor sau aplica\u021biilor care fac solicit\u0103ri de diferite atacuri.<\/p>\n<ul>\n<li><strong>MitM, sau \u201eomul din mijloc\u201d<\/strong>: f\u0103r\u0103 criptare, un sistem intermediar situat \u00eentre client \u0219i serverul DNS autoritar poate trimite poten\u021bial clientului informa\u021bii false sau periculoase ca r\u0103spuns la solicitare<\/li>\n<li><strong>Spionaj \u0219i urm\u0103rire<\/strong>: f\u0103r\u0103 criptarea solicit\u0103rilor, sistemele intermediare pot vizualiza cu u\u0219urin\u021b\u0103 la ce site-uri acceseaz\u0103 un anumit utilizator sau aplica\u021bie. De\u0219i dintr-un DNS simplu nu se poate deduce pagina specific\u0103 vizitat\u0103 pe un site, cunoa\u0219terea simpl\u0103 a domeniilor solicitate este suficient\u0103 pentru a forma un profil al sistemului sau al unei persoane individuale.<\/li>\n<\/ul>\n<p><img decoding=\"async\" alt=\"Ghid de securitate DNS\" src=\"\/wp-content\/uploads\/2020\/09\/31bb5e540feac0302244253b1c12ed32.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\nSursa: <noindex><a rel=\"nofollow\" href=\"https:\/\/faculty.sites.uci.edu\/zhouli\/files\/2019\/11\/conext19.pdf\">Universitatea din California Irvine<\/a><\/noindex><\/p>\n<h2> DoH \u2014 DNS peste HTTPS<\/h2>\n<p>\nDNS-over-HTTPS (DNS peste HTTPS, DoH) este un protocol experimental promovat \u00een comun de Mozilla \u0219i Google. Obiectivele sale sunt similare cu cele ale protocolului DoT \u2013 sporirea confiden\u021bialit\u0103\u021bii utilizatorilor pe internet prin criptarea cererilor \u0219i r\u0103spunsurilor DNS.<\/p>\n<p>Cererea standard DNS este transmis\u0103 prin UDP. Cererile \u0219i r\u0103spunsurile pot fi urm\u0103rite cu ajutorul unor instrumente precum <noindex><a rel=\"nofollow\" href=\"https:\/\/www.varonis.com\/blog\/how-to-use-wireshark\/\">Wireshark<\/a><\/noindex>. DoT cripteaz\u0103 aceste cereri, dar ele sunt \u00een continuare identificate ca un trafic UDP destul de evident \u00een re\u021bea.<\/p>\n<p>DoH folose\u0219te o abordare diferit\u0103 \u0219i transmite cereri criptate pentru traducerea numelui nodurilor de re\u021bea prin conexiuni HTTPS, care \u00een re\u021bea par a fi orice alt\u0103 cerere web.<\/p>\n<p>Aceast\u0103 diferen\u021b\u0103 are consecin\u021be foarte importante at\u00e2t pentru administratorii de sistem, c\u00e2t \u0219i pentru viitorul traducerii numelui.<\/p>\n<ol>\n<li>Filtrarea DNS este o metod\u0103 comun\u0103 de a filtra traficul web pentru a proteja utilizatorii de atacuri de phishing, site-uri care distribuie programe mali\u021bioase sau alte activit\u0103\u021bi poten\u021bial periculoase pe internet \u00een re\u021beaua corporate. Protocolul DoH ocole\u0219te aceste filtre, expun\u00e2nd poten\u021bial utilizatorii \u0219i re\u021beaua la un risc mai ridicat. <\/li>\n<li>\u00cen modelul actual de traducere a numelui, fiecare dispozitiv din re\u021bea prime\u0219te \u00een oarecare m\u0103sur\u0103 cererile DNS din acela\u0219i loc (de la serverul DNS specificat). DoH \u0219i, \u00een special, implementarea sa de Firefox arat\u0103 c\u0103 acest lucru ar putea s\u0103 se schimbe \u00een viitor. Fiecare aplica\u021bie de pe computer poate ob\u021bine date din diferite surse DNS, ceea ce complic\u0103 semnificativ identificarea \u0219i remedierea problemelor, asigurarea securit\u0103\u021bii \u0219i modelarea riscurilor. <\/li>\n<\/ol>\n<p><img decoding=\"async\" alt=\"Ghid de securitate DNS\" src=\"\/wp-content\/uploads\/2020\/09\/46ece02ca361b133d4a6bd488b917c73.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\nSursa: <noindex><a rel=\"nofollow\" href=\"https:\/\/www.varonis.com\/blog\/what-is-powershell\/\">www.varonis.com\/blog\/what-is-powershell<\/a><\/noindex><\/p>\n<h3> Care este diferen\u021ba \u00eentre DNS peste TLS \u0219i DNS peste HTTPS?<\/h3>\n<p>\nS\u0103 \u00eencepem cu DNS peste TLS (DoT). Accentul aici se pune pe faptul c\u0103 protocoalele originale DNS nu sunt modificate, ci sunt transmise \u00een siguran\u021b\u0103 printr-un canal securizat. DoH, pe de alt\u0103 parte, plaseaz\u0103 DNS \u00eentr-un format HTTP \u00eenainte de a executa cererile.<\/p>\n<h2> Alerte de monitorizare DNS<\/h2>\n<p>\n<img decoding=\"async\" alt=\"Ghid de securitate DNS\" src=\"\/wp-content\/uploads\/2020\/09\/fbbd9f320922dbd2eec180a253ba54f0.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nCapacitatea de a urm\u0103ri eficient traficul DNS din re\u021beaua dumneavoastr\u0103 pentru anomalii suspecte este esen\u021bial\u0103 pentru detectarea timpurie a bre\u0219elor de securitate. Utilizarea unui instrument precum Varonis Edge v\u0103 va permite s\u0103 fi\u021bi la curent cu toate indicatorii importan\u021bi \u0219i s\u0103 crea\u021bi profile pentru fiecare cont din re\u021beaua dumneavoastr\u0103. Pute\u021bi configura generarea de alerte \u00een urma combina\u021biilor de ac\u021biuni care au loc \u00eentr-o anumit\u0103 perioad\u0103 de timp.<\/p>\n<p>Monitorizarea modific\u0103rilor DNS, a loca\u021biilor conturilor, precum \u0219i a momentelor de utilizare \u0219i accesare a datelor confiden\u021biale, al\u0103turi de activitatea \u00een afara orelor de lucru \u2014 acestea sunt doar c\u00e2\u021biva dintre indicatorii care pot fi corela\u021bi pentru a crea un tablou mai amplu al detect\u0103rii.<br \/>\n<br \/>Sursa: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/varonis\/blog\/519108\/\">habr.com<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u0427\u0435\u043c \u0431\u044b \u043d\u0438 \u0437\u0430\u043d\u0438\u043c\u0430\u043b\u0430\u0441\u044c \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f, \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c DNS \u0434\u043e\u043b\u0436\u043d\u0430 \u044f\u0432\u043b\u044f\u0442\u044c\u0441\u044f \u043d\u0435\u043e\u0442\u044a\u0435\u043c\u043b\u0435\u043c\u043e\u0439 \u0447\u0430\u0441\u0442\u044c\u044e \u0435\u0435 \u043f\u043b\u0430\u043d\u0430 \u043f\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044e \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438. \u0421\u043b\u0443\u0436\u0431\u044b \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u0438\u043c\u0435\u043d, \u043f\u0440\u0435\u043e\u0431\u0440\u0430\u0437\u043e\u0432\u044b\u0432\u0430\u044e\u0449\u0438\u0435 \u0438\u043c\u0435\u043d\u0430 \u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u0443\u0437\u043b\u043e\u0432 \u0432 IP-\u0430\u0434\u0440\u0435\u0441\u0430, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442\u0441\u044f \u0431\u0443\u043a\u0432\u0430\u043b\u044c\u043d\u043e \u0432\u0441\u0435\u043c\u0438 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f\u043c\u0438 \u0438 \u0441\u043b\u0443\u0436\u0431\u0430\u043c\u0438 \u0432 \u0441\u0435\u0442\u0438. \u0415\u0441\u043b\u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043f\u043e\u043b\u0443\u0447\u0438\u0442 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 DNS \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438, \u0442\u043e \u0441\u043c\u043e\u0436\u0435\u0442 \u0431\u0435\u0437 \u043f\u0440\u043e\u0431\u043b\u0435\u043c: \u043f\u0435\u0440\u0435\u0434\u0430\u0442\u044c \u0441\u0435\u0431\u0435 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u043d\u0430\u0434 \u0440\u0435\u0441\u0443\u0440\u0441\u0430\u043c\u0438, \u043d\u0430\u0445\u043e\u0434\u044f\u0449\u0438\u043c\u0438\u0441\u044f \u0432 \u043e\u0431\u0449\u0435\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u0435 \u043f\u0435\u0440\u0435\u043d\u0430\u043f\u0440\u0430\u0432\u0438\u0442\u044c \u0432\u0445\u043e\u0434\u044f\u0449\u0438\u0435 [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":94322,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-94321","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.2.1 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u0427\u0435\u043c \u0431\u044b \u043d\u0438 \u0437\u0430\u043d\u0438\u043c\u0430\u043b\u0430\u0441\u044c \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f, \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/ro\/blog\/administrirovanie\/rukovodstvo-po-bezopasnosti-dns\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.2.1\" \/>\n\t\t<meta property=\"og:locale\" content=\"ro_RO\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u0420\u0443\u043a\u043e\u0432\u043e\u0434\u0441\u0442\u0432\u043e \u043f\u043e \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 DNS | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u0427\u0435\u043c \u0431\u044b \u043d\u0438 \u0437\u0430\u043d\u0438\u043c\u0430\u043b\u0430\u0441\u044c \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f, \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/ro\/blog\/administrirovanie\/rukovodstvo-po-bezopasnosti-dns\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2020-09-15T17:42:32+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2020-09-15T17:42:32+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Ghid de securitate DNS | ProHoster","description":"Indiferent de activitatea desf\u0103\u0219urat\u0103 de companie, securitatea","canonical_url":"https:\/\/prohoster.info\/ro\/blog\/administrirovanie\/rukovodstvo-po-bezopasnosti-dns","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"ro_RO","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0420\u0443\u043a\u043e\u0432\u043e\u0434\u0441\u0442\u0432\u043e \u043f\u043e \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 DNS | ProHoster","og:description":"\u0427\u0435\u043c \u0431\u044b \u043d\u0438 \u0437\u0430\u043d\u0438\u043c\u0430\u043b\u0430\u0441\u044c \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f, \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c","og:url":"https:\/\/prohoster.info\/ro\/blog\/administrirovanie\/rukovodstvo-po-bezopasnosti-dns","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-09-15T17:42:32+00:00","article:modified_time":"2020-09-15T17:42:32+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"94321","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 11:29:29","updated":"2022-09-30 08:27:56","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/94321","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/comments?post=94321"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/94321\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media\/94322"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media?parent=94321"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/categories?post=94321"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/tags?post=94321"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}