怎么判断 DNS 是否被宽带运营商劫持

[1604563715]

DNS 有没有被宽带运营商劫持，该如何查看。

[wswj]

@ovear
dig 加 trace 怎么看？我这是移动宽带， nslookup whether.114dns.com 114.114.114.114 返回 127.0.0.1 ， dig 看不懂....

; <<>> DiG 9.3.2 <<>> @114.114.114.114 sina.com.cn +trace
; (1 server found)
;; global options: printcmd
. 259705 IN NS h.root-servers.net.
. 259705 IN NS l.root-servers.net.
. 259705 IN NS c.root-servers.net.
. 259705 IN NS a.root-servers.net.
. 259705 IN NS k.root-servers.net.
. 259705 IN NS i.root-servers.net.
. 259705 IN NS f.root-servers.net.
. 259705 IN NS e.root-servers.net.
. 259705 IN NS g.root-servers.net.
. 259705 IN NS d.root-servers.net.
. 259705 IN NS j.root-servers.net.
. 259705 IN NS m.root-servers.net.
. 259705 IN NS b.root-servers.net.
;; Received 496 bytes from 114.114.114.114#53(114.114.114.114) in 10 ms

cn. 172800 IN NS a.dns.cn.
cn. 172800 IN NS b.dns.cn.
cn. 172800 IN NS c.dns.cn.
cn. 172800 IN NS d.dns.cn.
cn. 172800 IN NS e.dns.cn.
cn. 172800 IN NS ns.cernet.net.
;; Received 292 bytes from 198.97.190.53#53(h.root-servers.net) in 250 ms

sina.com.cn. 86400 IN NS ns2.sina.com.cn.
sina.com.cn. 86400 IN NS ns4.sina.com.cn.
sina.com.cn. 86400 IN NS ns3.sina.com.cn.
sina.com.cn. 86400 IN NS ns1.sina.com.cn.
;; Received 165 bytes from 203.119.25.1#53(a.dns.cn) in 53 ms

sina.com.cn. 60 IN A 202.108.33.60
sina.com.cn. 86400 IN NS ns4.sina.com.cn.
sina.com.cn. 86400 IN NS ns1.sina.com.cn.
sina.com.cn. 86400 IN NS ns2.sina.com.cn.
sina.com.cn. 86400 IN NS ns3.sina.com.cn.
;; Received 181 bytes from 61.172.201.254#53(ns2.sina.com.cn) in 66 ms

[raysonx]

@raysonx 就是你说的情况啊， io 是个顶级域，它就解析了 @的 A 记录。

[raysonx]

@bclerdx 手滑点错，看楼上

[ovear]

@wswj 递归 dns ， dns 详细介绍可以去看我博客_(:з」∠)_）偷偷安利下

dns 解析过程大概是

递归 dns-全球根 dns 服务器-所在后缀根服务器-域名 whois 所在的 ns-正确结果

上面的过程大概是

;; Received 496 bytes from 114.114.114.114#53(114.114.114.114) in 10 ms
;; Received 292 bytes from 198.97.190.53#53(h.root-servers.net) in 250 ms
;; Received 165 bytes from 203.119.25.1#53(a.dns.cn) in 53 ms
;; Received 181 bytes from 61.172.201.254#53(ns2.sina.com.cn) in 66 ms

114.114.114.114 -> h.root-servers.net -> a.dns.cn -> ns2.sina.com.cn -> 202.180.33.60

如果中间任意一步断了，就说明运营商劫持了

[bclerdx]

@ovear 那所谓的“ Local DNS ”，翻译为中国大陆语言为“本地 DNS ”解析又是怎么回事？这个本地到底是至宽带归属的运营商那里，还是至客户终端的电脑？

[ovear]

@bclerdx 本地所指定的 DNS