I think DNSSec solves a different problem, one where someone is maliciously tampering with DNS requests.
This is a discussion of what you can do with an ordinary DNS client and server.
More interestingly, there doesn't seem to be much software out there for monitoring DNS requests and spotting anomalies, is anyone aware of software that does this (preferably FOSS)?
This is a discussion of what you can do with an ordinary DNS client and server.
More interestingly, there doesn't seem to be much software out there for monitoring DNS requests and spotting anomalies, is anyone aware of software that does this (preferably FOSS)?
Edit: A quick search turns up this, I'll have to try this out. https://isc.sans.edu/diary/A+Poor+Man%27s+DNS+Anomaly+Detect...