Advanced network protection and admission control by dns filtering

Анотація

The aim of this work is to propose an effective and scalable approach to network traffic filtering by utilizing open-source technologies, specifically the PowerDNS software for DNS resolution and filtering. The proposed model involves defining filtering rules using the DNS Firewall, which can block or redirect DNS queries based on various criteria.The proposed automated solution involves a script that reads a list of domains from a file and creates a new DNS zone for each domain.The handling of HTTPS traffic requires special attention to ensure proper functionality and security, as the filtering software may need to intercept and modify the SSL certificate verification process to display the blocking page. However, this can pose a security risk if not implemented correctly. It is also important to consider the issue of allowing users to specify their own DNS servers, as blocking such requests may create difficulties for users who require static DNS server settings. This may result in network engineers having to identify and resolve issues in the network. Overall, the proposed PowerDNS-based filtering solution provides a cost-effective and customizable approach to network traffic filtering, which can improve an organization's security and performance.

Ключові слова: DNS; network; traffic filtering; network filtering; online privacy; online security

Як цитувати

@article{internauka8839,
  author   = {Слабович, Володимир Вячеславович and Мар'яновський, Віталій Анатолійович and Бойко, Юрій Володимирович and Борецький, Олександр Францович},
  title    = {Advanced network protection and admission control by dns filtering},
  journal  = {Міжнародний науковий журнал «Інтернаука»},
  year     = {2023},
  number   = {8},
  doi      = {10.25313/2520-2057-2023-8-8839},
  url      = {https://www.inter-nauka.com/issues/2023/8/8839}
}

TY  - JOUR
AU  - Слабович, Володимир Вячеславович
AU  - Мар'яновський, Віталій Анатолійович
AU  - Бойко, Юрій Володимирович
AU  - Борецький, Олександр Францович
TI  - Advanced network protection and admission control by dns filtering
JO  - Міжнародний науковий журнал «Інтернаука»
PY  - 2023
IS  - 8
SN  - 2520-2057
DO  - 10.25313/2520-2057-2023-8-8839
UR  - https://www.inter-nauka.com/issues/2023/8/8839
LA  - en
ER  -