Quantcast
Channel: EdgeRouter topics
Viewing all articles
Browse latest Browse all 20028

DNS spoofing via 'hostfile-update'

$
0
0

Please make 'hostfile-update' feature more secure. I see some issues with it:

1. 'domain-name's must not forgotten to be set on router, otherwise anyone may point e.g. "google.com" to its machine;

2. anyone may override an existing /etc/hosts entry by setting its machine hostname equal to one in that entry.

Additionally, it would be nice to allow disabling of this feature for dynamic hosts while leaving it enabled for static mapped hosts, as 'hostfile-update' is better than manual adding of 'static-host-mapping' for every 'static-mapping'.


Viewing all articles
Browse latest Browse all 20028

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>