Method, System, and Apparatus for Discovering User Agent DNS Settings

• US 20100036969A1
• Filed: 08/26/2008
• Published: 02/11/2010
• Est. Priority Date: 08/27/2007
• Status: Active Grant

• Current Assignee: SolarWinds Worldwide LLC (SolarWinds Corp.)
• Original Assignee: Declude, Inc.
• Inventors: Parisi, Paul D., Perry, R. Scott
• Granted Patent: US 7,984,186 B2
• Time in Patent Office: Days
• US Class Current: 709/245
• CPC Class Codes: H04L 61/4511 using domain name system [DNS]
• CPC Class Codes: H04L 63/1441 Countermeasures against malicious traffic countermeasures against attacks on cryptographic mechanisms H04L9/002
• CPC Class Codes: H04L 63/1483 service impersonation, e.g. phishing, pharming or web spoofing detection of rogue wireless access points H04W12/12
• CPC Class Codes: H04L 67/02 based on web technology, e.g. hypertext transfer protocol [HTTP]
• CPC Class Codes: H04L 67/303 Terminal profiles

Abstract

A method, system and apparatus including receiving a request from a network device, the request including an IP address of said network device, generating and sending to the network device a domain name for locating a device configured to process a DNS query, the domain name corresponding to the IP address, the network device generating and sending a DNS query including the domain name and at least one local DNS setting of the network device to the device configured to the process the DNS query, and the device processing an association between the IP address and the at least one local DNS setting of the network device.

Claims

1. A method comprising the steps of:

receiving a request from a network device, said request including an IP address of said network device;

generating a domain name for locating a device configured to process a DNS query, said domain name corresponding to said IP address;

sending said domain name to said network device;

generating and sending a DNS query including said domain name and at least one local DNS setting of said network device from said network device to said device configured to process said DNS query; and

processing an association between said IP address and said at least one local DNS setting of said network device.

2. The method, as set forth in claim 1, wherein said device is configured to process said DNS query includes said device configured to at least one of a store, forward, analyze, monitor, validate, and authenticate said DNS query.

3. The method, as set forth in claim 1, wherein said device processing said association between said IP address and said at least one local DNS setting includes said device at least one of a storing, forwarding, analyzing, monitoring, validating, and authenticating said association between said IP address and said at least one local DNS setting.

4. The method, as set forth in claim 3, further including the step of:

determining whether at least one of a current device IP address and current local DNS setting matches to a table of previously stored associations of approved prior IP addresses and prior local DNS settings.

5. The method, as set forth in claim 4, further including the step of:

allowing said network resource to access content from said device when it is determined that there is at least one match in said table.

6. The method, as set forth in claim 4, further including the step of:

notifying said network device that said at least one of a current device IP address and current local DNS setting may be at risk when it is determined that there is no match in said table.

7. The method, as set forth in claim 1, further including the step of:

generating said domain name in response to said network device receiving said first request.

8. The method, as set forth in claim 1, further including the step of:

generating said DNS query in response to said network device receiving said domain name.

9. The method, as set forth in claim 1, further including the step of:

storing said association between said IP address and said local DNS settings of said network device in response to said device receiving said second request from said network device.

10. The method, as set forth in claim 1, further including the step of:

generating said domain name.

11. The method, as set forth in claim 10, further including the step of:

generating a subdomain from said IP address.

12. The method, as set forth in claim 1, further including the step of:

receiving said request from a user agent of said network device.

14. The method, as set forth in claim 1, further including the step of:

generating said second content in response to said first network device receiving said first request.

15. The method, as set forth in claim 1, further including the step of:

generating said second request in response to said second network device receiving said second content.

16. The method, as set forth in claim 1, further including the step of:

storing said association between said IP address and said local DNS settings of said second network device in response to said domain name server receiving said second request from said second network device.

17. The method, as set forth in claim 1, further including the step of:

generating said second domain name.

18. The method, as set forth in claim 17, further including the step of:

generating a subdomain from said IP address and appending said first domain name to said subdomain.

13. A method comprising:

receiving a first request for a first content from a second network device, said first request including a first domain name for locating a first network device and an IP address of said second network device;

generating a second content including a second domain name for locating a domain name server, said second domain name corresponding to said IP address and said first domain name;

sending said first content and said second content to said second network device;

generating a second request including said second domain name and at least one local DNS setting of said second network device;

said second network device sending said second request to a domain name server; and

said domain name server storing an association between said IP address and said at least one local DNS setting of said second network device.

19. A system comprising the following:

a domain name server configured to store an association between an IP address and at least one domain name system (DNS) setting of a network device; and

a content server in operative association with said domain name server, said content server configured to receive a first request for a first content from said network device, said first request including a first domain name to locate said content server and said IP address of said network device, to generate a second content including a second domain name to locate said domain name server, said second domain name corresponding to said IP address and said first domain name, and to send said first content and said second content to said network device wherein said network device is configured to generate a second request including said second domain name and said at least one DNS setting, and send said second request to said domain name server.

20. A computer program product comprising computer readable program code stored on a computer readable medium, the program code adapted to execute a method including a first network device receiving a first request from a second network device, said first request including an IP address of said second network device, said first network device generating and sending a content to said second network device, said content including a domain name for locating a domain name server, said domain name corresponding to said IP address, said second network device generating and sending a second request to said domain name server, said second request including said domain name and at least one domain name system (DNS) setting of said second network device, and said domain name server one of a storing and forwarding an association between said IP address and said at least one DNS setting.