Awesome, less famous DNS trick by Dan Kaminsky: DNS source routing

ccc.de

10 pointsshykes4 comments

Summary: You can establish inbound IP traffic to a host inside a private network, with no IP to route to, and no DNAT setup.

You do it by fooling the private network's local dns resolver into relaying trafic back in forth.

See slides 18 to 25 for the relevant part.

There was a Perl script for doing this called OzyManDNS which worked well.

Seems like the Author's site is down, though. Does someone have a mirror?

You are referring to DNS tunneling, which is different.

With OzymanDNS your laptop can tunnel out to the net in spite of your hotel's crappy gateway.

With DNS source routing anyone on the Net can tunnel onto your laptop in spite of it having no way to receive inbound IP traffic.