Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

IPConfig showing IPV6 DNS ?


  • Please log in to reply
12 replies to this topic

#1 MrC0f33

MrC0f33

  • Members
  • 40 posts
  • OFFLINE
  •  
  • Gender:Not Telling
  • Local time:07:31 PM

Posted 27 September 2017 - 02:25 AM

Greetings everyone,

Just today, when I typed in ipconfig/all into elevated CMD, I was shown 4 DNS servers instead of the usual 2. I believe the first 2 DNS are IPV6 and the last 2 are IPV4. (All of this will be shown in my MTB logs).

My question are the following:

1) Is this normal? 

2) Are these DNS Servers Legit?

Thank-you



BC AdBot (Login to Remove)

 


#2 Wand3r3r

Wand3r3r

  • Members
  • 2,027 posts
  • OFFLINE
  •  
  • Local time:04:31 AM

Posted 27 September 2017 - 09:48 AM

Perfectly normal.



#3 Sneakycyber

Sneakycyber

    Network Engineer


  • BC Advisor
  • 6,109 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Ohio
  • Local time:07:31 AM

Posted 27 September 2017 - 09:49 AM

I can tell you the IPV6 Ip address is likely the IPV6 address of your router so those look legit.


Chad Mockensturm 

Systems and Network Engineer

Certified CompTia Network +, A +


#4 MrC0f33

MrC0f33
  • Topic Starter

  • Members
  • 40 posts
  • OFFLINE
  •  
  • Gender:Not Telling
  • Local time:07:31 PM

Posted 27 September 2017 - 10:29 AM

I can tell you the IPV6 Ip address is likely the IPV6 address of your router so those look legit.

Thanks for the information mate.

So both my IPV4 and IPV6 DNS are legit from my ISP?
Btw, my ISP is TM Net. Is there anyway to check from the given DNS in my MTB Logs?

Thank-you



#5 MrC0f33

MrC0f33
  • Topic Starter

  • Members
  • 40 posts
  • OFFLINE
  •  
  • Gender:Not Telling
  • Local time:07:31 PM

Posted 27 September 2017 - 10:30 AM

Perfectly normal.

Ah I see I see.

Because prior to restarting my modem and router (due to a power outage), whenever I ran ipconfig/all, I will only be shown IPV4 DNS's. So that is why I am curious as to why there are two sudden IPV6 addreses. 

 

Thank-you



#6 Wand3r3r

Wand3r3r

  • Members
  • 2,027 posts
  • OFFLINE
  •  
  • Local time:04:31 AM

Posted 27 September 2017 - 11:11 AM

"So both my IPV4 and IPV6 DNS are legit from my ISP?"

 

Your isp isn't providing those ips.  Your router is. They supply ip to the wan interface of the router not the lan side of the router.

 

 I suspect the router has always supplied ipv6 ips but you had it turned off [unchecked] in network properties on your pc.  Perhaps a recent update turned ipv6 on.



#7 MrC0f33

MrC0f33
  • Topic Starter

  • Members
  • 40 posts
  • OFFLINE
  •  
  • Gender:Not Telling
  • Local time:07:31 PM

Posted 27 September 2017 - 12:12 PM

"So both my IPV4 and IPV6 DNS are legit from my ISP?"

 

Your isp isn't providing those ips.  Your router is. They supply ip to the wan interface of the router not the lan side of the router.

 

 I suspect the router has always supplied ipv6 ips but you had it turned off [unchecked] in network properties on your pc.  Perhaps a recent update turned ipv6 on.

Oh I see I see. I've always thought that it was my ISP who were providing me with those DNS.

May I kindly then, inquire about the method by which to ensure that these provided DNS are legit and not fake?
I have read a lot about DNS Poisoning or Hijacking and was wondering is there a way to identify and determine such issue.

Or in other words, how do I know my router is providing me with a valid DNS and how do I know the DNS provided is given by my router?

Thank-you



#8 Wand3r3r

Wand3r3r

  • Members
  • 2,027 posts
  • OFFLINE
  •  
  • Local time:04:31 AM

Posted 27 September 2017 - 10:54 PM

You would use nslookup to test your dns settings as valid or not.

 

Google nslookup for more info. 

 

"how do I know the DNS provided is given by my router?"

because you know about how a dhcp server/protocol works

 

"DNS Poisoning or Hijacking and was wondering is there a way to identify and determine such issue."

might make for a good read

https://www.grc.com/dns/dns.htm



#9 MrC0f33

MrC0f33
  • Topic Starter

  • Members
  • 40 posts
  • OFFLINE
  •  
  • Gender:Not Telling
  • Local time:07:31 PM

Posted 27 September 2017 - 11:16 PM

You would use nslookup to test your dns settings as valid or not.

 

Google nslookup for more info. 

 

"how do I know the DNS provided is given by my router?"

because you know about how a dhcp server/protocol works

 

"DNS Poisoning or Hijacking and was wondering is there a way to identify and determine such issue."

might make for a good read

https://www.grc.com/dns/dns.htm

 

Thanks for the info mate. I have tried GRC and got "No nameservers were found" result.
I have tried NSLOOKUP on elevated cmd and it gave me this:
 

C:\Windows\system32>nslookup
Default Server:  cdns01v6.tm.net.my
Address:  2001:e68::b:68

So all my DNS listed are good?

Thank-you


#10 Wand3r3r

Wand3r3r

  • Members
  • 2,027 posts
  • OFFLINE
  •  
  • Local time:04:31 AM

Posted 28 September 2017 - 05:00 PM

All of your dns servers [v4 and v6] come up for Malaysia.  If your isp is in Malaysia you are fine.



#11 MrC0f33

MrC0f33
  • Topic Starter

  • Members
  • 40 posts
  • OFFLINE
  •  
  • Gender:Not Telling
  • Local time:07:31 PM

Posted 29 September 2017 - 05:07 AM

All of your dns servers [v4 and v6] come up for Malaysia.  If your isp is in Malaysia you are fine.

Oh Thanks for the information mate!

Mind I ask which website did you use to check those DNS?

Thank-you



#12 Wand3r3r

Wand3r3r

  • Members
  • 2,027 posts
  • OFFLINE
  •  
  • Local time:04:31 AM

Posted 29 September 2017 - 10:29 AM

nslookup and google



#13 MrC0f33

MrC0f33
  • Topic Starter

  • Members
  • 40 posts
  • OFFLINE
  •  
  • Gender:Not Telling
  • Local time:07:31 PM

Posted 01 October 2017 - 08:47 AM

nslookup and google

Ah I see I see.

Thank-you once again for your help mate!






0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users