dns使用（DNS usage）.docVIP

dns使用（DNS usage） Windows2K8 has three name resolution methods: 1.DNS domain environment 2.LLMNR Working Group 3.NetBIOS Working Group LLMNR: link local multicast name resolution Open mode: network and shared center network discovery link local multicast name resolution can only be used in Vista and 2K8 Rationale: by multicast, the IPV6 address is parsed from the computer name found on the local subnet. If LLMNR is available, then it is prior to NetBIOS. In a single subnet without a DNS infrastructure, if the network contains only Vista and 2K8, and enables IPV6 and network discovery, LLMNR will be used for parsing LLMNR also sends name resolution requests to 52 on the IPV4, but the 2K8 and Vista clients do not respond to this request by default Advantages: 1.. The computer name of the local subnet can be resolved without any configuration 2., unlike NetBios, which is compatible with IPV6, basically, LLMNR is the only type of name resolution protocol that does not need to be configured on the IPV6 supported windows network 3., compared with NetBIOS, it is relatively small service, thus narrowing the attack surface Cons: 1. 2K3, XP, or earlier version of Windows computer, it cannot resolve its name 2., the actual link between the build and the client in the IPV4 windows network can no longer be supported only. 3., in order for LLMNR to work properly, you must enable network discovery on all computers in your subnet. By default, you do not need to configure him in time, but it does not resolve the names of adjacent computers 4. the biggest flaw cannot be used to parse the name of the computer other than the local subnet Disable method: configure the policy management template through the group policy GPO computer DNS network client to close the multicast name resolution NetBIOS: only the default name resolution method without DNS under the IPV4 network condition, there is no need to start the network found in the case of \\computer name, this UNC can connect to other c