Monday, 23 February 2015

Want to Encrypt DNS Traffic in Ubuntu? Learn How to Do it Using DNSCrypt


Have you ever thought about using an encrypted web browsing environment or securing your server environment to prevent spying and man-in-the-middle attacks? If yes, then you must know about DNSCrypt, a protocol for securing communications, which enables a user to establish strong DNS security layers and prevents spoofing. The DNScrypt-proxy tool helps a user to encrypt everything that is being transferred between the client and a DNS resolver. The tool can easily act as a DNS forwarder, enabling a configured network to authenticate incoming/outgoing traffic requests and passing them to an upstream server. 
DNS security
Undoubtedly, setting up DNS and managing its security isn’t an easy task, but it is required every time you access a website, send an email or engage in IM conversations. In a world where every Internet user is relying on OpenDNS, DNSCrypt provides world-class Internet security by protecting the ‘last mile.’ The ‘last mile’ refers to the distance of your Internet connection between your computer and your ISP. Tech experts claim that the new protocol will soon be a part of world’s Internet connectivity, preventing serious security concerns and helping users to connect different Wi-Fi networks.



Why You Need the New DNS Protocol? 

New DNS Protocol 
If you’re using Internet for years, then there is no point in explaining about why and how you should encrypt inward/outward traffic. DNS attacks may result in serious cyber crimes, engaging malware authors and hackers stealing your private and confidential information. As SSL turns unprotected HTTP web traffic into HTTPS encrypted traffic, similarly this protocol turns normal DNS traffic into an encrypted traffic channel.
The entire encryption process helps a user in countering eavesdropping and man-in-the-middle attacks, resulting in establishing a strong and secure internet connection. The best thing about this web browsing encryption tool is that it will not make any changes to domain names or its functionalities. All it will do is to secure an encrypted communication network between the customers and DNS servers to avoid any serious data loss or hacking. 



Simple Steps to Install DNSCrypt in Ubuntu


1.       Open the terminal in Ubuntu and run these commands to install DNSCrypt:

·         sudo add-apt-repository ppa:shnatsel/DNScrypt
·         sudo apt-get update
·         sudo apt-get install DNScrypt-proxy

2.       Once the utility gets installed, click the ‘Network icon’ to open the network manager and select ‘Edit connections’ option from the context menu
DNSCrypt

3.       A ‘Network connections’ window will open, now pick your network connection and click on the ‘Edit’ button
DNSCrypt

4.       You will see  an additional options window, and you’ll need to switch to the ‘IPv4 settings’ tab to proceed further

5.       Change the ‘Automatic DHCP’ option to ‘Automatic DHCP addresses only’ and enter the DNS IP address as ‘127.0.0.2’

Automatic DHCP addresses

6.       Or if you’re using a ‘Manual' method, then there is no need to change the options, you can proceed by entering the DNS address

7.       Click the ‘Save’ button to make and save the changes

8.       Now, restart your network connection or your Ubuntu machine to bring the changes in action and enjoy secured web browsing experience.

Conclusion


Once you’ve enabled this DNSsecurity protocol, all your DNS communications will automatically get encrypted to deliver a safer online experience. Always remember that installing and setting up DNS protocol will ensure that all your DNS requests get authenticated and approved before they reach your PC. It is a must download utility for people using VPN services as they won’t encrypt your incoming/outgoing traffic and may give rise to severe online attacks. If you are really concerned about your online security and privacy, then encrypt DNS traffic in Ubuntu using DNSCrypt to avoid man-in-the-middle attacks and DNS hijacking!

No comments:

Post a Comment