{"id":476947,"date":"2023-08-09T09:05:36","date_gmt":"2023-08-09T09:05:36","guid":{"rendered":""},"modified":"2023-09-05T11:13:44","modified_gmt":"2023-09-05T11:13:44","slug":"dns-tunneling","status":"publish","type":"wiki","link":"https:\/\/oneproxy.pro\/jp\/wiki\/dns-tunneling\/","title":{"rendered":"DNS\u30c8\u30f3\u30cd\u30ea\u30f3\u30b0"},"content":{"rendered":"<p>DNS \u30c8\u30f3\u30cd\u30ea\u30f3\u30b0\u306f\u3001\u30c9\u30e1\u30a4\u30f3 \u30cd\u30fc\u30e0 \u30b7\u30b9\u30c6\u30e0 (DNS) \u30d7\u30ed\u30c8\u30b3\u30eb\u3092\u4f7f\u7528\u3057\u3066\u3001TCP \u3084 HTTP \u306a\u3069\u306e\u4ed6\u306e\u30cd\u30c3\u30c8\u30ef\u30fc\u30af \u30d7\u30ed\u30c8\u30b3\u30eb\u3092\u30ab\u30d7\u30bb\u30eb\u5316\u3059\u308b\u624b\u6cd5\u3067\u3059\u3002\u30d5\u30a1\u30a4\u30a2\u30a6\u30a9\u30fc\u30eb\u306a\u3069\u306e\u30cd\u30c3\u30c8\u30ef\u30fc\u30af \u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u5bfe\u7b56\u3092\u56de\u907f\u3057\u3066\u79d8\u5bc6\u306e\u901a\u4fe1\u30c1\u30e3\u30cd\u30eb\u3092\u78ba\u7acb\u3059\u308b\u65b9\u6cd5\u3068\u3057\u3066\u3088\u304f\u4f7f\u7528\u3055\u308c\u307e\u3059\u3002<\/p>\n<h2>DNS \u30c8\u30f3\u30cd\u30ea\u30f3\u30b0\u306e\u6b74\u53f2\u7684\u9032\u5316<\/h2>\n<p>DNS \u30c8\u30f3\u30cd\u30ea\u30f3\u30b0\u306e\u6700\u3082\u521d\u671f\u306e\u4e8b\u4f8b\u306f\u3001\u30a4\u30f3\u30bf\u30fc\u30cd\u30c3\u30c8 \u30e6\u30fc\u30b6\u30fc\u304c\u30a2\u30af\u30bb\u30b9\u5236\u9650\u3092\u56de\u907f\u3057\u305f\u308a\u3001Web \u30a2\u30af\u30c6\u30a3\u30d3\u30c6\u30a3\u3092\u533f\u540d\u5316\u3059\u308b\u65b9\u6cd5\u3092\u63a2\u3057\u3066\u3044\u305f 1990 \u5e74\u4ee3\u5f8c\u534a\u304b\u3089 2000 \u5e74\u4ee3\u524d\u534a\u306b\u307e\u3067\u9061\u308a\u307e\u3059\u3002DNS \u30d7\u30ed\u30c8\u30b3\u30eb\u3092\u5229\u7528\u3057\u3066\u4ed6\u306e\u30d7\u30ed\u30c8\u30b3\u30eb\u3092\u30ab\u30d7\u30bb\u30eb\u5316\u3059\u308b\u65b9\u6cd5\u306f\u3001\u305d\u306e\u6709\u52b9\u6027\u3068 DNS \u30d7\u30ed\u30c8\u30b3\u30eb\u81ea\u4f53\u306e\u76f8\u5bfe\u7684\u306a\u666e\u53ca\u306b\u3088\u308a\u3001\u307e\u3059\u307e\u3059\u666e\u53ca\u3057\u307e\u3057\u305f\u3002<\/p>\n<p>\u3053\u306e\u6280\u8853\u306f\u30012004 \u5e74\u306b Ron Bowes \u306b\u3088\u3063\u3066\u958b\u767a\u3055\u308c\u305f\u30c4\u30fc\u30eb\u3067\u3042\u308b DNScat \u306e\u767b\u5834\u306b\u3088\u308a\u3001\u305d\u306e\u4f7f\u7528\u304c\u8457\u3057\u304f\u5897\u52a0\u3057\u307e\u3057\u305f\u3002\u3053\u308c\u306f\u3001DNS \u30c8\u30f3\u30cd\u30ea\u30f3\u30b0\u306e\u6700\u521d\u306e\u5b9f\u7528\u7684\u306a\u5b9f\u88c5\u306e 1 \u3064\u3067\u3042\u308a\u3001\u30cd\u30c3\u30c8\u30ef\u30fc\u30af\u5236\u9650\u3092\u56de\u907f\u3059\u308b\u5b9f\u884c\u53ef\u80fd\u306a\u65b9\u6cd5\u3068\u3057\u3066\u8a8d\u77e5\u3055\u308c\u308b\u3088\u3046\u306b\u306a\u308a\u307e\u3057\u305f\u3002<\/p>\n<h2>DNS \u30c8\u30f3\u30cd\u30ea\u30f3\u30b0\u306e\u8a73\u7d30<\/h2>\n<p>DNS \u30c8\u30f3\u30cd\u30ea\u30f3\u30b0\u3068\u306f\u3001DNS \u30af\u30a8\u30ea\u3068\u5fdc\u7b54\u306b DNS \u4ee5\u5916\u306e\u30c7\u30fc\u30bf\u3092\u57cb\u3081\u8fbc\u3080\u884c\u70ba\u3092\u6307\u3057\u307e\u3059\u3002DNS \u8981\u6c42\u306f\u901a\u5e38\u3001\u307b\u3068\u3093\u3069\u306e\u30d5\u30a1\u30a4\u30a2\u30a6\u30a9\u30fc\u30eb\u3067\u8a31\u53ef\u3055\u308c\u308b\u305f\u3081\u3001\u307b\u3068\u3093\u3069\u306e\u30cd\u30c3\u30c8\u30ef\u30fc\u30af \u30bb\u30ad\u30e5\u30ea\u30c6\u30a3 \u30b7\u30b9\u30c6\u30e0\u3092\u6c17\u4ed8\u304b\u308c\u305a\u306b\u30d0\u30a4\u30d1\u30b9\u3067\u304d\u308b\u30c7\u30fc\u30bf\u4ea4\u63db\u7528\u306e\u76ee\u7acb\u305f\u306a\u3044\u30c1\u30e3\u30cd\u30eb\u304c\u63d0\u4f9b\u3055\u308c\u307e\u3059\u3002<\/p>\n<p>\u3053\u306e\u30d7\u30ed\u30bb\u30b9\u3067\u306f\u3001\u30af\u30e9\u30a4\u30a2\u30f3\u30c8\u304c\u30a8\u30f3\u30b3\u30fc\u30c9\u3055\u308c\u305f\u30c7\u30fc\u30bf\u3092\u542b\u3080 DNS \u8981\u6c42\u3092\u30b5\u30fc\u30d0\u30fc\u306b\u9001\u4fe1\u3057\u307e\u3059\u3002\u30b5\u30fc\u30d0\u30fc\u306f\u8981\u6c42\u3092\u30c7\u30b3\u30fc\u30c9\u3057\u3066\u57cb\u3081\u8fbc\u307e\u308c\u305f\u30c7\u30fc\u30bf\u3092\u51e6\u7406\u3057\u3001\u5fc5\u8981\u306a\u623b\u308a\u30c7\u30fc\u30bf (\u3053\u308c\u3082 DNS \u5fdc\u7b54\u5185\u306b\u30a8\u30f3\u30b3\u30fc\u30c9\u3055\u308c\u3066\u3044\u307e\u3059) \u3092\u542b\u3080\u5fdc\u7b54\u3092\u30af\u30e9\u30a4\u30a2\u30f3\u30c8\u306b\u9001\u4fe1\u3057\u307e\u3059\u3002<\/p>\n<h2>DNS \u30c8\u30f3\u30cd\u30ea\u30f3\u30b0\u306e\u5185\u90e8\u306e\u4ed5\u7d44\u307f<\/h2>\n<p>DNS \u30c8\u30f3\u30cd\u30ea\u30f3\u30b0\u306e\u30d7\u30ed\u30bb\u30b9\u306f\u6bd4\u8f03\u7684\u7c21\u5358\u3067\u3001\u6b21\u306e\u624b\u9806\u306b\u5206\u3051\u308b\u3053\u3068\u304c\u3067\u304d\u307e\u3059\u3002<\/p>\n<ol>\n<li>\n<p><strong>\u30af\u30e9\u30a4\u30a2\u30f3\u30c8\u30fb\u30b5\u30fc\u30d0\u30fc\u901a\u4fe1<\/strong>: \u30af\u30e9\u30a4\u30a2\u30f3\u30c8\u306f\u3001DNS \u30c8\u30f3\u30cd\u30ea\u30f3\u30b0\u3092\u5bb9\u6613\u306b\u3059\u308b\u305f\u3081\u306b\u8a2d\u5b9a\u3055\u308c\u305f DNS \u30b5\u30fc\u30d0\u30fc\u3068\u306e\u901a\u4fe1\u3092\u958b\u59cb\u3057\u307e\u3059\u3002<\/p>\n<\/li>\n<li>\n<p><strong>\u30c7\u30fc\u30bf\u306e\u30a8\u30f3\u30b3\u30fc\u30c9<\/strong>: \u30af\u30e9\u30a4\u30a2\u30f3\u30c8\u306f\u3001\u9001\u4fe1\u3057\u305f\u3044\u30c7\u30fc\u30bf\u3092 DNS \u30af\u30a8\u30ea\u306b\u57cb\u3081\u8fbc\u307f\u307e\u3059\u3002\u3053\u306e\u30c7\u30fc\u30bf\u306f\u901a\u5e38\u3001DNS \u8981\u6c42\u306e\u30b5\u30d6\u30c9\u30e1\u30a4\u30f3\u90e8\u5206\u306b\u30a8\u30f3\u30b3\u30fc\u30c9\u3055\u308c\u307e\u3059\u3002<\/p>\n<\/li>\n<li>\n<p><strong>\u30c7\u30fc\u30bf\u9001\u4fe1<\/strong>: \u57cb\u3081\u8fbc\u307e\u308c\u305f\u30c7\u30fc\u30bf\u3092\u542b\u3080 DNS \u30af\u30a8\u30ea\u306f\u3001\u30cd\u30c3\u30c8\u30ef\u30fc\u30af\u7d4c\u7531\u3067 DNS \u30b5\u30fc\u30d0\u30fc\u306b\u9001\u4fe1\u3055\u308c\u307e\u3059\u3002<\/p>\n<\/li>\n<li>\n<p><strong>\u30c7\u30fc\u30bf\u306e\u30c7\u30b3\u30fc\u30c9<\/strong>: DNS \u30b5\u30fc\u30d0\u30fc\u306f\u8981\u6c42\u3092\u53d7\u4fe1\u3059\u308b\u3068\u3001\u57cb\u3081\u8fbc\u307e\u308c\u305f\u30c7\u30fc\u30bf\u3092\u62bd\u51fa\u3057\u3066\u30c7\u30b3\u30fc\u30c9\u3057\u307e\u3059\u3002<\/p>\n<\/li>\n<li>\n<p><strong>\u30ec\u30b9\u30dd\u30f3\u30b9\u30a8\u30f3\u30b3\u30fc\u30c7\u30a3\u30f3\u30b0<\/strong>: \u5fdc\u7b54\u304c\u5fc5\u8981\u306a\u5834\u5408\u3001\u30b5\u30fc\u30d0\u30fc\u306f\u8fd4\u3055\u308c\u305f\u30c7\u30fc\u30bf\u3092 DNS \u5fdc\u7b54\u306b\u57cb\u3081\u8fbc\u307f\u3001\u305d\u308c\u3092\u30af\u30e9\u30a4\u30a2\u30f3\u30c8\u306b\u9001\u308a\u8fd4\u3057\u307e\u3059\u3002<\/p>\n<\/li>\n<li>\n<p><strong>\u30ec\u30b9\u30dd\u30f3\u30b9\u306e\u30c7\u30b3\u30fc\u30c9<\/strong>: \u30af\u30e9\u30a4\u30a2\u30f3\u30c8\u306f DNS \u5fdc\u7b54\u3092\u53d7\u4fe1\u3057\u3001\u57cb\u3081\u8fbc\u307e\u308c\u305f\u30c7\u30fc\u30bf\u3092\u30c7\u30b3\u30fc\u30c9\u3057\u3001\u305d\u308c\u306b\u5fdc\u3058\u3066\u51e6\u7406\u3057\u307e\u3059\u3002<\/p>\n<\/li>\n<\/ol>\n<h2>DNS\u30c8\u30f3\u30cd\u30ea\u30f3\u30b0\u306e\u4e3b\u306a\u6a5f\u80fd<\/h2>\n<p>DNS \u30c8\u30f3\u30cd\u30ea\u30f3\u30b0\u3092\u5b9f\u884c\u53ef\u80fd\u306a\u6280\u8853\u306b\u3059\u308b\u4e3b\u306a\u6a5f\u80fd\u306b\u306f\u3001\u6b21\u306e\u3082\u306e\u304c\u3042\u308a\u307e\u3059\u3002<\/p>\n<ol>\n<li>\n<p><strong>\u30b9\u30c6\u30eb\u30b9<\/strong>: DNS \u30c8\u30f3\u30cd\u30ea\u30f3\u30b0\u306f\u3001\u591a\u304f\u306e\u30d5\u30a1\u30a4\u30a2\u30a6\u30a9\u30fc\u30eb\u3084\u30cd\u30c3\u30c8\u30ef\u30fc\u30af \u30bb\u30ad\u30e5\u30ea\u30c6\u30a3 \u30b7\u30b9\u30c6\u30e0\u3092\u691c\u77e5\u3055\u308c\u305a\u306b\u56de\u907f\u3067\u304d\u307e\u3059\u3002<\/p>\n<\/li>\n<li>\n<p><strong>\u591a\u7528\u9014\u6027<\/strong>DNS \u30c8\u30f3\u30cd\u30ea\u30f3\u30b0\u306f\u3001\u5e45\u5e83\u3044\u30cd\u30c3\u30c8\u30ef\u30fc\u30af \u30d7\u30ed\u30c8\u30b3\u30eb\u3092\u30ab\u30d7\u30bb\u30eb\u5316\u3067\u304d\u308b\u305f\u3081\u3001\u591a\u76ee\u7684\u306b\u4f7f\u7528\u3067\u304d\u308b\u30c7\u30fc\u30bf\u8ee2\u9001\u65b9\u6cd5\u3068\u306a\u308a\u307e\u3059\u3002<\/p>\n<\/li>\n<li>\n<p><strong>\u904d\u5728\u6027<\/strong>DNS \u30d7\u30ed\u30c8\u30b3\u30eb\u306f\u30a4\u30f3\u30bf\u30fc\u30cd\u30c3\u30c8\u4e0a\u3067\u307b\u307c\u666e\u904d\u7684\u306b\u4f7f\u7528\u3055\u308c\u3066\u3044\u308b\u305f\u3081\u3001DNS \u30c8\u30f3\u30cd\u30ea\u30f3\u30b0\u306f\u5e45\u5e83\u3044\u30b7\u30ca\u30ea\u30aa\u306b\u9069\u7528\u3067\u304d\u307e\u3059\u3002<\/p>\n<\/li>\n<\/ol>\n<h2>DNS \u30c8\u30f3\u30cd\u30ea\u30f3\u30b0\u306e\u3055\u307e\u3056\u307e\u306a\u30bf\u30a4\u30d7<\/h2>\n<p>DNS \u30c8\u30f3\u30cd\u30ea\u30f3\u30b0\u306b\u306f\u3001\u30c7\u30fc\u30bf\u8ee2\u9001\u30e2\u30fc\u30c9\u306b\u3088\u3063\u3066\u533a\u5225\u3055\u308c\u308b 2 \u3064\u306e\u4e3b\u306a\u30bf\u30a4\u30d7\u304c\u3042\u308a\u307e\u3059\u3002<\/p>\n<ol>\n<li>\n<p><strong>\u76f4\u63a5DNS\u30c8\u30f3\u30cd\u30ea\u30f3\u30b0<\/strong>: \u3053\u308c\u306f\u3001\u30af\u30e9\u30a4\u30a2\u30f3\u30c8\u304c DNS \u8981\u6c42\u3068\u5fdc\u7b54\u3092\u4ecb\u3057\u3066\u30b5\u30fc\u30d0\u30fc\u3068\u76f4\u63a5\u901a\u4fe1\u3059\u308b\u5834\u5408\u3067\u3059\u3002\u901a\u5e38\u3001\u30af\u30e9\u30a4\u30a2\u30f3\u30c8\u304c\u30a4\u30f3\u30bf\u30fc\u30cd\u30c3\u30c8\u4e0a\u306e\u4efb\u610f\u306e\u30b5\u30fc\u30d0\u30fc\u306b\u4efb\u610f\u306e DNS \u8981\u6c42\u3092\u884c\u3046\u3053\u3068\u304c\u3067\u304d\u308b\u5834\u5408\u306b\u4f7f\u7528\u3055\u308c\u307e\u3059\u3002<\/p>\n<table>\n<thead>\n<tr>\n<th>\u30b3\u30df\u30e5\u30cb\u30b1\u30fc\u30b7\u30e7\u30f3\u65b9\u6cd5<\/th>\n<th>\u76f4\u63a5DNS\u30c8\u30f3\u30cd\u30ea\u30f3\u30b0<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td>\u30b3\u30df\u30e5\u30cb\u30b1\u30fc\u30b7\u30e7\u30f3<\/td>\n<td>\u76f4\u63a5<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<\/li>\n<li>\n<p><strong>\u518d\u5e30DNS\u30c8\u30f3\u30cd\u30ea\u30f3\u30b0<\/strong>: \u3053\u308c\u306f\u3001\u30af\u30e9\u30a4\u30a2\u30f3\u30c8\u304c\u7279\u5b9a\u306e DNS \u30b5\u30fc\u30d0\u30fc (\u30cd\u30c3\u30c8\u30ef\u30fc\u30af\u306e\u30ed\u30fc\u30ab\u30eb DNS \u30b5\u30fc\u30d0\u30fc\u306a\u3069) \u306b\u5bfe\u3057\u3066\u306e\u307f DNS \u8981\u6c42\u3092\u884c\u3046\u3053\u3068\u304c\u3067\u304d\u3001\u305d\u306e\u5f8c\u3001\u305d\u306e\u30b5\u30fc\u30d0\u30fc\u304c\u30af\u30e9\u30a4\u30a2\u30f3\u30c8\u306b\u4ee3\u308f\u3063\u3066\u3055\u3089\u306b\u8981\u6c42\u3092\u884c\u3046\u3068\u304d\u306b\u4f7f\u7528\u3055\u308c\u307e\u3059\u3002\u3053\u306e\u5834\u5408\u306e\u30c8\u30f3\u30cd\u30ea\u30f3\u30b0 \u30b5\u30fc\u30d0\u30fc\u306f\u3001\u901a\u5e38\u3001\u30a4\u30f3\u30bf\u30fc\u30cd\u30c3\u30c8\u4e0a\u306e\u30d1\u30d6\u30ea\u30c3\u30af DNS \u30b5\u30fc\u30d0\u30fc\u3067\u3059\u3002<\/p>\n<table>\n<thead>\n<tr>\n<th>\u30b3\u30df\u30e5\u30cb\u30b1\u30fc\u30b7\u30e7\u30f3\u65b9\u6cd5<\/th>\n<th>\u518d\u5e30DNS\u30c8\u30f3\u30cd\u30ea\u30f3\u30b0<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td>\u30b3\u30df\u30e5\u30cb\u30b1\u30fc\u30b7\u30e7\u30f3<\/td>\n<td>\u9593\u63a5\u7684\uff08\u518d\u5e30\u7684\uff09<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<\/li>\n<\/ol>\n<h2>DNS \u30c8\u30f3\u30cd\u30ea\u30f3\u30b0\u306e\u5b9f\u7528\u7684\u306a\u30a2\u30d7\u30ea\u30b1\u30fc\u30b7\u30e7\u30f3\u3001\u554f\u984c\u3001\u304a\u3088\u3073\u30bd\u30ea\u30e5\u30fc\u30b7\u30e7\u30f3<\/h2>\n<p>DNS \u30c8\u30f3\u30cd\u30ea\u30f3\u30b0\u306f\u3001\u7121\u5bb3\u306a\u3082\u306e\u304b\u3089\u60aa\u610f\u306e\u3042\u308b\u3082\u306e\u307e\u3067\u3001\u3055\u307e\u3056\u307e\u306a\u65b9\u6cd5\u3067\u4f7f\u7528\u3067\u304d\u307e\u3059\u3002\u691c\u95b2\u3084\u305d\u306e\u4ed6\u306e\u30cd\u30c3\u30c8\u30ef\u30fc\u30af\u5236\u9650\u3092\u56de\u907f\u3057\u305f\u308a\u3001DNS \u7d4c\u7531\u3067 VPN \u306e\u3088\u3046\u306a\u30b5\u30fc\u30d3\u30b9\u3092\u78ba\u7acb\u3057\u305f\u308a\u3059\u308b\u305f\u3081\u306b\u4f7f\u7528\u3055\u308c\u308b\u3053\u3068\u304c\u3042\u308a\u307e\u3059\u3002\u305f\u3060\u3057\u3001\u60aa\u610f\u306e\u3042\u308b\u884c\u70ba\u8005\u304c\u30c7\u30fc\u30bf\u3092\u76d7\u307f\u51fa\u3057\u305f\u308a\u3001\u30b3\u30de\u30f3\u30c9 \u30a2\u30f3\u30c9 \u30b3\u30f3\u30c8\u30ed\u30fc\u30eb \u30c1\u30e3\u30cd\u30eb\u3092\u78ba\u7acb\u3057\u305f\u308a\u3001\u60aa\u610f\u306e\u3042\u308b\u30c8\u30e9\u30d5\u30a3\u30c3\u30af\u3092\u30c8\u30f3\u30cd\u30ea\u30f3\u30b0\u3057\u305f\u308a\u3059\u308b\u305f\u3081\u306b\u983b\u7e41\u306b\u4f7f\u7528\u3055\u308c\u308b\u3053\u3068\u3082\u3042\u308a\u307e\u3059\u3002<\/p>\n<p>DNS \u30c8\u30f3\u30cd\u30ea\u30f3\u30b0\u306b\u95a2\u3059\u308b\u4e00\u822c\u7684\u306a\u554f\u984c\u306f\u6b21\u306e\u3068\u304a\u308a\u3067\u3059\u3002<\/p>\n<ol>\n<li>\n<p><strong>\u30d1\u30d5\u30a9\u30fc\u30de\u30f3\u30b9<\/strong>: DNS \u306f\u9ad8\u901f\u30c7\u30fc\u30bf\u8ee2\u9001\u7528\u306b\u8a2d\u8a08\u3055\u308c\u3066\u3044\u306a\u3044\u305f\u3081\u3001DNS \u30c8\u30f3\u30cd\u30ea\u30f3\u30b0\u306f\u6a19\u6e96\u306e\u30cd\u30c3\u30c8\u30ef\u30fc\u30af\u901a\u4fe1\u306b\u6bd4\u3079\u3066\u6bd4\u8f03\u7684\u9045\u304f\u306a\u308b\u53ef\u80fd\u6027\u304c\u3042\u308a\u307e\u3059\u3002<\/p>\n<\/li>\n<li>\n<p><strong>\u691c\u51fa<\/strong>DNS \u30c8\u30f3\u30cd\u30ea\u30f3\u30b0\u306f\u591a\u304f\u306e\u30d5\u30a1\u30a4\u30a2\u30a6\u30a9\u30fc\u30eb\u3092\u56de\u907f\u3067\u304d\u307e\u3059\u304c\u3001\u3088\u308a\u9ad8\u5ea6\u306a\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3 \u30b7\u30b9\u30c6\u30e0\u3067\u306f\u3053\u308c\u3092\u691c\u51fa\u3057\u3066\u30d6\u30ed\u30c3\u30af\u3067\u304d\u308b\u53ef\u80fd\u6027\u304c\u3042\u308a\u307e\u3059\u3002<\/p>\n<\/li>\n<li>\n<p><strong>\u4fe1\u983c\u6027<\/strong>: DNS \u306f\u30b9\u30c6\u30fc\u30c8\u30ec\u30b9 \u30d7\u30ed\u30c8\u30b3\u30eb\u3067\u3042\u308a\u3001\u672c\u8cea\u7684\u306b\u30c7\u30fc\u30bf\u306e\u4fe1\u983c\u6027\u306e\u9ad8\u3044\u914d\u4fe1\u3092\u4fdd\u8a3c\u3059\u308b\u3082\u306e\u3067\u306f\u3042\u308a\u307e\u305b\u3093\u3002<\/p>\n<\/li>\n<\/ol>\n<p>\u3053\u308c\u3089\u306e\u554f\u984c\u306f\u3001\u30c8\u30f3\u30cd\u30ea\u30f3\u30b0 \u30b7\u30b9\u30c6\u30e0\u3092\u614e\u91cd\u306b\u69cb\u6210\u3057\u305f\u308a\u3001\u30a8\u30e9\u30fc\u8a02\u6b63\u30b3\u30fc\u30c9\u3092\u4f7f\u7528\u3057\u305f\u308a\u3001DNS \u30c8\u30f3\u30cd\u30ea\u30f3\u30b0\u3092\u4ed6\u306e\u6280\u8853\u3068\u7d44\u307f\u5408\u308f\u305b\u3066\u30b9\u30c6\u30eb\u30b9\u6027\u3068\u4fe1\u983c\u6027\u3092\u9ad8\u3081\u305f\u308a\u3059\u308b\u3053\u3068\u3067\u8efd\u6e1b\u3067\u304d\u308b\u3053\u3068\u304c\u591a\u3044\u3067\u3059\u3002<\/p>\n<h2>DNS \u30c8\u30f3\u30cd\u30ea\u30f3\u30b0\u3068\u985e\u4f3c\u6280\u8853\u306e\u6bd4\u8f03<\/h2>\n<p>\u4ee5\u4e0b\u306b\u3001\u3044\u304f\u3064\u304b\u306e\u985e\u4f3c\u3057\u305f\u624b\u6cd5\u3068\u3001DNS \u30c8\u30f3\u30cd\u30ea\u30f3\u30b0\u3068\u306e\u6bd4\u8f03\u3092\u793a\u3057\u307e\u3059\u3002<\/p>\n<table>\n<thead>\n<tr>\n<th>\u6280\u8853<\/th>\n<th>DNS \u30c8\u30f3\u30cd\u30ea\u30f3\u30b0<\/th>\n<th>HTTP \u30c8\u30f3\u30cd\u30ea\u30f3\u30b0<\/th>\n<th>ICMP \u30c8\u30f3\u30cd\u30ea\u30f3\u30b0<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td>\u30b9\u30c6\u30eb\u30b9<\/td>\n<td>\u9ad8\u3044<\/td>\n<td>\u9069\u5ea6<\/td>\n<td>\u4f4e\u3044<\/td>\n<\/tr>\n<tr>\n<td>\u591a\u7528\u9014\u6027<\/td>\n<td>\u9ad8\u3044<\/td>\n<td>\u9069\u5ea6<\/td>\n<td>\u4f4e\u3044<\/td>\n<\/tr>\n<tr>\n<td>\u904d\u5728\u6027<\/td>\n<td>\u9ad8\u3044<\/td>\n<td>\u9ad8\u3044<\/td>\n<td>\u9069\u5ea6<\/td>\n<\/tr>\n<tr>\n<td>\u30b9\u30d4\u30fc\u30c9<\/td>\n<td>\u4f4e\u3044<\/td>\n<td>\u9ad8\u3044<\/td>\n<td>\u9069\u5ea6<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<p>\u8868\u306b\u793a\u3055\u308c\u3066\u3044\u308b\u3088\u3046\u306b\u3001DNS \u30c8\u30f3\u30cd\u30ea\u30f3\u30b0\u306f\u6700\u901f\u3067\u306f\u3042\u308a\u307e\u305b\u3093\u304c\u3001\u9ad8\u3044\u30b9\u30c6\u30eb\u30b9\u6027\u3068\u6c4e\u7528\u6027\u3092\u5099\u3048\u3066\u3044\u308b\u305f\u3081\u3001\u3055\u307e\u3056\u307e\u306a\u30b7\u30ca\u30ea\u30aa\u3067\u9078\u629e\u3055\u308c\u308b\u624b\u6cd5\u3068\u306a\u3063\u3066\u3044\u307e\u3059\u3002<\/p>\n<h2>DNS \u30c8\u30f3\u30cd\u30ea\u30f3\u30b0\u306e\u5c06\u6765\u5c55\u671b<\/h2>\n<p>\u30cd\u30c3\u30c8\u30ef\u30fc\u30af \u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u304c\u9032\u5316\u3057\u7d9a\u3051\u308b\u306b\u3064\u308c\u3066\u3001DNS \u30c8\u30f3\u30cd\u30ea\u30f3\u30b0\u306a\u3069\u306e\u6280\u8853\u3082\u9032\u5316\u3057\u3066\u3044\u304d\u307e\u3059\u3002\u3053\u306e\u5206\u91ce\u306e\u4eca\u5f8c\u306e\u958b\u767a\u3067\u306f\u3001DNS \u30c8\u30f3\u30cd\u30ea\u30f3\u30b0\u306e\u30b9\u30c6\u30eb\u30b9\u6027\u3068\u6c4e\u7528\u6027\u3092\u3055\u3089\u306b\u5f37\u5316\u3057\u3001\u3088\u308a\u6d17\u7df4\u3055\u308c\u305f\u691c\u51fa\u65b9\u6cd5\u3092\u958b\u767a\u3057\u3001\u7570\u5e38\u691c\u51fa\u306e\u305f\u3081\u306e\u6a5f\u68b0\u5b66\u7fd2\u306a\u3069\u306e\u4ed6\u306e\u9032\u5316\u3059\u308b\u6280\u8853\u3068\u306e\u7d71\u5408\u3092\u6a21\u7d22\u3059\u308b\u3053\u3068\u306b\u91cd\u70b9\u304c\u7f6e\u304b\u308c\u308b\u53ef\u80fd\u6027\u304c\u3042\u308a\u307e\u3059\u3002<\/p>\n<p>\u3055\u3089\u306b\u3001\u30af\u30e9\u30a6\u30c9\u30d9\u30fc\u30b9\u306e\u30b5\u30fc\u30d3\u30b9\u3084 IoT \u30c7\u30d0\u30a4\u30b9\u306e\u53f0\u982d\u306b\u3088\u308a\u3001DNS \u30c8\u30f3\u30cd\u30ea\u30f3\u30b0\u306f\u3001\u5b89\u5168\u3067\u79d8\u5bc6\u306e\u901a\u4fe1\u30c1\u30e3\u30cd\u30eb\u3092\u63d0\u4f9b\u3059\u308b\u3068\u3044\u3046\u70b9\u3067\u3082\u3001\u60aa\u610f\u306e\u3042\u308b\u884c\u70ba\u8005\u306b\u3088\u308b\u6f5c\u5728\u7684\u306a\u30c7\u30fc\u30bf\u6d41\u51fa\u3084\u30b3\u30de\u30f3\u30c9 \u30a2\u30f3\u30c9 \u30b3\u30f3\u30c8\u30ed\u30fc\u30eb \u30c1\u30e3\u30cd\u30eb\u306e\u624b\u6bb5\u3068\u3057\u3066\u3082\u3001\u65b0\u305f\u306a\u7528\u9014\u304c\u751f\u307e\u308c\u308b\u53ef\u80fd\u6027\u304c\u3042\u308a\u307e\u3059\u3002<\/p>\n<h2>DNS \u30c8\u30f3\u30cd\u30ea\u30f3\u30b0\u306b\u304a\u3051\u308b\u30d7\u30ed\u30ad\u30b7 \u30b5\u30fc\u30d0\u30fc\u306e\u5f79\u5272<\/h2>\n<p>OneProxy \u304c\u63d0\u4f9b\u3059\u308b\u3088\u3046\u306a\u30d7\u30ed\u30ad\u30b7 \u30b5\u30fc\u30d0\u30fc\u306f\u3001DNS \u30c8\u30f3\u30cd\u30ea\u30f3\u30b0\u3067\u91cd\u8981\u306a\u5f79\u5272\u3092\u679c\u305f\u3057\u307e\u3059\u3002DNS \u30c8\u30f3\u30cd\u30ea\u30f3\u30b0\u304c\u4f7f\u7528\u3055\u308c\u308b\u8a2d\u5b9a\u3067\u306f\u3001\u30d7\u30ed\u30ad\u30b7 \u30b5\u30fc\u30d0\u30fc\u306f\u3001DNS \u8981\u6c42\u306b\u57cb\u3081\u8fbc\u307e\u308c\u305f\u30c7\u30fc\u30bf\u3092\u30c7\u30b3\u30fc\u30c9\u3057\u3001\u9069\u5207\u306a\u5b9b\u5148\u306b\u8ee2\u9001\u3059\u308b\u4ef2\u4ecb\u5f79\u3068\u3057\u3066\u6a5f\u80fd\u3057\u307e\u3059\u3002<\/p>\n<p>\u3053\u308c\u306b\u3088\u308a\u3001\u30d7\u30ed\u30ad\u30b7 \u30b5\u30fc\u30d0\u30fc\u304c\u30c7\u30fc\u30bf\u306e\u30a8\u30f3\u30b3\u30fc\u30c9\u3068\u30c7\u30b3\u30fc\u30c9\u306e\u30bf\u30b9\u30af\u3092\u51e6\u7406\u3067\u304d\u308b\u305f\u3081\u3001DNS \u30c8\u30f3\u30cd\u30ea\u30f3\u30b0\u306e\u30b9\u30c6\u30eb\u30b9\u6027\u3068\u52b9\u7387\u6027\u304c\u5411\u4e0a\u3057\u3001\u30af\u30e9\u30a4\u30a2\u30f3\u30c8\u3068\u30b5\u30fc\u30d0\u30fc\u306f\u4e3b\u306a\u30bf\u30b9\u30af\u306b\u96c6\u4e2d\u3067\u304d\u308b\u3088\u3046\u306b\u306a\u308a\u307e\u3059\u3002\u3055\u3089\u306b\u3001\u30d7\u30ed\u30ad\u30b7 \u30b5\u30fc\u30d0\u30fc\u306e\u4f7f\u7528\u306b\u3088\u308a\u3001\u30d7\u30ed\u30bb\u30b9\u306e\u533f\u540d\u6027\u3068\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u3092\u3055\u3089\u306b\u9ad8\u3081\u308b\u3053\u3068\u304c\u3067\u304d\u307e\u3059\u3002<\/p>\n<h2>\u95a2\u9023\u30ea\u30f3\u30af<\/h2>\n<p>DNS \u30c8\u30f3\u30cd\u30ea\u30f3\u30b0\u306e\u8a73\u7d30\u306b\u3064\u3044\u3066\u306f\u3001\u6b21\u306e\u30ea\u30bd\u30fc\u30b9\u3092\u53c2\u7167\u3057\u3066\u304f\u3060\u3055\u3044\u3002<\/p>\n<ol>\n<li><a href=\"https:\/\/www.cloudflare.com\/learning\/dns\/glossary\/dns-tunneling\/\" target=\"_new\" rel=\"noopener nofollow\">DNS \u30c8\u30f3\u30cd\u30ea\u30f3\u30b0: \u60aa\u610f\u306e\u3042\u308b\u4eba\u7269\u304c DNS \u3092\u60aa\u7528\u3059\u308b\u65b9\u6cd5<\/a><\/li>\n<li><a href=\"https:\/\/krebsonsecurity.com\/2019\/02\/a-deep-dive-on-the-recent-widespread-dns-hijacking-attacks\/\" target=\"_new\" rel=\"noopener nofollow\">\u6700\u8fd1\u5e83\u307e\u3063\u3066\u3044\u308b DNS \u30cf\u30a4\u30b8\u30e3\u30c3\u30af\u653b\u6483\u306e\u8a73\u7d30<\/a><\/li>\n<li><a href=\"https:\/\/cybersecurity.att.com\/blogs\/security-essentials\/dns-tunneling-how-it-works\" target=\"_new\" rel=\"noopener nofollow\">DNS \u30c8\u30f3\u30cd\u30ea\u30f3\u30b0: \u4ed5\u7d44\u307f<\/a><\/li>\n<li><a href=\"https:\/\/www.acunetix.com\/blog\/articles\/dns-tunneling\/\" target=\"_new\" rel=\"noopener nofollow\">DNS\u30c8\u30f3\u30cd\u30ea\u30f3\u30b0\u3068\u306f<\/a><\/li>\n<li><a href=\"https:\/\/securityintelligence.com\/posts\/the-ongoing-threat-of-dns-tunneling\/\" target=\"_new\" rel=\"noopener nofollow\">DNS \u30c8\u30f3\u30cd\u30ea\u30f3\u30b0\u306e\u7d99\u7d9a\u7684\u306a\u8105\u5a01<\/a><\/li>\n<\/ol>","protected":false},"featured_media":476948,"menu_order":0,"template":"","meta":{"_acf_changed":false,"content-type":"","inline_featured_image":false,"footnotes":""},"class_list":["post-476947","wiki","type-wiki","status-publish","has-post-thumbnail","hentry"],"acf":{"faq_title":"Frequently Asked Questions about <mark>A Comprehensive Look at DNS Tunneling<\/mark>","faq_items":[{"question":"What is DNS Tunneling?","answer":"<p>DNS tunneling is a technique that uses the Domain Name System (DNS) protocol to encapsulate other network protocols such as TCP and HTTP. It is often used to bypass network security measures to establish covert communication channels.<\/p>"},{"question":"When was DNS Tunneling first used?","answer":"<p>DNS tunneling has been used since the late 1990s and early 2000s. It gained more popularity with the advent of DNScat, a tool developed by Ron Bowes in 2004, which provided one of the first practical implementations of DNS tunneling.<\/p>"},{"question":"How does DNS Tunneling work?","answer":"<p>DNS tunneling involves embedding non-DNS data into DNS queries and responses. The client sends a DNS request with encoded data to the server, which then decodes the request, processes the embedded data, and sends a response back to the client with any necessary return data, also encoded within a DNS response.<\/p>"},{"question":"What are the key features of DNS Tunneling?","answer":"<p>Key features of DNS tunneling include its stealthiness, versatility, and ubiquity. DNS tunneling can bypass many firewalls and network security systems undetected. It can encapsulate a wide range of network protocols, and the DNS protocol itself is almost universally used on the internet.<\/p>"},{"question":"What types of DNS Tunneling exist?","answer":"<p>There are two main types of DNS tunneling - Direct DNS Tunneling and Recursive DNS Tunneling. Direct DNS Tunneling is when a client communicates directly with a server via DNS requests and responses, typically used when the client can make arbitrary DNS requests to any server on the internet. Recursive DNS Tunneling is used when the client can only make DNS requests to a specific DNS server, which then makes further requests on behalf of the client.<\/p>"},{"question":"What are some ways to use DNS Tunneling, and what problems might arise from its use?","answer":"<p>DNS tunneling can be used to circumvent censorship or network restrictions, or to establish VPN-like services over DNS. However, it can also be used maliciously to exfiltrate data or establish command and control channels. Common issues with DNS tunneling include performance, as DNS tunneling can be slow compared to standard network communications, detection by advanced security systems, and reliability, since DNS is a stateless protocol.<\/p>"},{"question":"How do Proxy Servers relate to DNS Tunneling?","answer":"<p>Proxy servers, such as those provided by OneProxy, can act as intermediaries in a DNS tunneling setup. They can decode the data embedded in DNS requests and forward it to the appropriate destination, enhancing the stealth and efficiency of DNS tunneling. The use of a proxy server can also provide an additional layer of anonymity and security.<\/p>"}]},"_links":{"self":[{"href":"https:\/\/oneproxy.pro\/jp\/wp-json\/wp\/v2\/wiki\/476947","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/oneproxy.pro\/jp\/wp-json\/wp\/v2\/wiki"}],"about":[{"href":"https:\/\/oneproxy.pro\/jp\/wp-json\/wp\/v2\/types\/wiki"}],"version-history":[{"count":0,"href":"https:\/\/oneproxy.pro\/jp\/wp-json\/wp\/v2\/wiki\/476947\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/oneproxy.pro\/jp\/wp-json\/wp\/v2\/media\/476948"}],"wp:attachment":[{"href":"https:\/\/oneproxy.pro\/jp\/wp-json\/wp\/v2\/media?parent=476947"}],"curies":[{"name":"\u3046\u30fc\u3093","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}