Domain name protecting system and method thereof

Abstract

A domain name protecting method comprises the following steps: a first domain name system server receives domain name inquiry datagram sent from an owned client terminal host computer; a second domain name system server judges whether the IP address of the client terminal host computer is in a black list which is stored in the second domain name system server to record the IP addresses of illegal client terminal host computers; when the IP address of the client terminal host computer is not in the black list, the second domain name system server judges whether the communication between the client terminal host computer and the first domain name system server is abnormal, if so, the IP address of the client terminal host computer is added in the black list; if the IP address of the client terminal host computer is in the black list, the second domain name system server sends a false IP address to the first domain name system server; the first domain name system server returns the received false IP address to the client terminal host computer. In addition, the invention also provides a domain name protecting system.

Description

technical field [0001] The invention relates to a domain name protection system and method. Background technique [0002] With the rapid development of computer networks, various websites, FTP, mail servers, etc. emerge in an endless stream. In order to use them conveniently and record their addresses, people use the Domain Name System (Domain Name System, DNS), which is a distributed database for TCP / IP applications, which provides the link between host names and IP addresses. To convert information, replace the original IP address of the server with a text or number with a certain meaning. When accessing the server, the domain name is analyzed through the DNS server to obtain the real IP of the server, and then perform data exchange. Domain name service makes the original digital and complex network structure easier to remember and understand, and plays a huge role in the development of computer networks. [0003] But at the same time, the domain name service is also eas...

AI Technical Summary

Problems solved by technology

This can prevent the attacker from invading the server to a certain extent, but when the attacker simulates the communication method of normal users and sends a large number of access and query requests to the domain name in a short period of time, the server will be completely occupied and network bandwidth resources, so that other users cannot use the service normally. For this kind of data attack, the effect of traditional processing methods is still not very obvious

Images