What is DNS? (and how it makes the Internet work)

[@NetworkChuck]

DNS can be hacked….use SecureDNS from Twingate to protect yourself and your people: ntck.co/twingate_zerotrust 🔍 Your Web Browser is Dumb….without DNS🔍 Did you know your web browser is clueless when it comes to finding websites? When you type in a URL like academy.networkchuck.com, your browser has no idea where to go. That's where DNS, the Domain Name System, steps in to save the day! 🌐 In this video, we dive deep into the magic behind DNS. We'll break down how your browser queries DNS servers to turn website names into IP addresses, making the internet work seamlessly. From how DNS can be hacked to how you can secure your own DNS with tools like SecureDNS from TwinGate, we've got it all covered. 💻 🔐 DNS Security Tips: Learn how to use DNS over HTTPS (DOH), DNS over TLS (DOT), and other methods to keep your browsing secure from hackers and prying eyes. Protect your privacy and keep your internet safe. 🛠 Tools Mentioned: TwinGate for SecureDNS Raspberry Pi for DIY DNS servers AdGuard and PiHole for ad-blocking and DNS control Grab your coffee ☕, and let’s dive into how the internet really works! 👉 Subscribe for more IT tutorials, cybersecurity tips, and fun tech projects! 🔥🔥Join the NetworkChuck Academy!: ntck.co/NCAcademy 💻📱Check out our new course, Laptop and Mobile Device Basics: ntck.co/mobiledevices **Sponsored by Twingate 00:00 - Introduction: Why your browser is "dumb" 01:46 - What is DNS? (The Contacts app of the Internet) 04:02 - DNS Hierarchy: The Mafia Bosses of the Internet 09:13 - Securing DNS from Hackers 15:30 - DNS Records Explained: A, NS, MX, and More 19:55 - Real-world example: Buying a New Domain 22:58 - Running Your Own DNS Server and Ethical DNS Hacking

[@L-Coder]

first

[@Hartley94]

Thank you for this one. Wou you please create one for securing email servers. Cheers! K.E

[@jarbystark]

everything can be hacked , Chuck ;)

[@Imassin]

Please, I want to speak with ChatGPT on my Windows PC, but there isn't a version for Windows. Can anyone help me overcome this problem?

[@manjilunnobi]

Public yha site paid dns required more secure your IP ... .. more firewall in needed

[@tylercode2207]

there is no spoon -- Your videos helped get a job in IT and change my life forever. Thank You brother.!!

[@chisomogbonna8992]

Your humor just makes it more exciting 😭... I much love networking

[@L-Coder]

Learning Networking is very Important

[@jarbystark]

understanding basics that dont change in 20 years truly does. thats the base knowledge

[@RazoBeckett.]

My favorite topic DNS, remember "it's Always DNS"

[@bornFor1Thing]

I'm new here, how often do I have to remind myself it's always dns?

[@RazoBeckett.]

@@bornFor1Thing atleast 3 times a day before eating so like before having breakfast, launch and dinner, and remember if your gf cheats on that's not her fault "It's always DNS!"

[@aRandomHomelabber]

Redshirtjeff

[@tpevers1048]

Why DNS 😢

[@johng.1703]

except when it is IPv6

[@keithrbumgarner]

You’re right “there is no spoon”, only sporks.

[@Bunny99s]

Very good summary of most of the important parts. Some time ago I actually read through the whole RFC as I implemented my own DNS server from scratch in C# :D It currently runs on my raspberry pi with mono. ps: SOA stands for Start Of Authority, not "State" :) Other than that all pretty accurate and comprehensive. pps: fun fact: in german "acid" is called "Säure" and DNA (Deoxyribonucleic acid) is actually called "DNS" in german (Desoxyribonukleinsäure). I think that's pretty fitting, the DNA of the internet :)

[@ppdan]

Fun fact : in dutch SOA is short for "seksueel overdraagbare aandoening" in english STD (sexually transmitted disease)

[@Bunny99s]

@@ppdan :D That's really funny. Just reminds you how dangerous the internet is :P So don't plug into unknown systems unprotected....

[@jeffreyhan8398]

haha

[@lilpaulbeats7678]

Chuck appreciation button>>>>>>>>

[@nikolaslehto8827]

ahh yes, the three dots > report button

[@judekeyz3296]

​@@nikolaslehto8827😹😹

[@jimshapedcoding]

I was looking into your videos from 4 years ago, and today, the editing and the quality of the metaphors to simplify your explanations is second to none, thanks for inspiring how instruction should be done.

[@オールマイト-y1f]

This was fun, I know dns but still liked it. It's been a while since I've seen any of your videos. I still remember before you went YT full time. You've done so well. Keep it up!

[@7ru7h0n3s7yf0r3v3r]

This fits nice and snug into your CCNA playlist. Appreciate the content!

[@Tin-m5c]

the editor on this video is insane 😂😂😂

[@mtthsgrr]

hey buddy, thank you for making the things I need to study super fun. You're a true friend

[@whoacarh]

Sorry, Chuck, but you missed a HUGELY CRITICAL aspect. The hosts file. Before it reaches out to stub to resolve, it'll look at anything in the hosts file to see if there's a static entry. This is also a common malware/hacking method to mess with people and hack them. It's literally the first thing you should probably check to ensure it's not interfering with something in DNS (because? it's literally the first thing your device will check). If your device checks that first, you should check it first as well. There's a lot of malware out there that will bar you from even looking at your own hosts file, even though you're an admin, by the way. It's kind of a dead giveaway that your device is infected.

[@MateriaDispuestaInc]

I haven't seen the full video, but WOW the first 2 minutes. You explanations are awesome! Thanks for doing this.

[@Amith332]

your explanation with connecting real world examples is too good man !!

[@cedarhamilton]

"There is no spoon" from The Matrix. You and your movies. You know a message is no longer a secret when you publish it on DNS. Everybody and their computers know it. Love your videos and humor.

[@alsothejiraguy]

It's not DNS. There's no way it's DNS. It was DNS.

[@farixromero517]

all days at work

[@goat5671]

pretty sure i have a mouse pad with that haiku

[@ElementalITcc]

it's always dns

[@vandorb12]

Ahh, I have this haiku framed in my office.

[@CookieXD1998]

It was a full DHCP Server... We had no free internal IP addresses for that network left.

[@masslubricat9850]

Awesome video, Chuck! Could you dive deeper into setting up a homelab server, particularly the hardware requirements for a budget-friendly build? It'd be great to see a comparison of the cost-effectiveness and benefits of running a homelab versus leveraging free cloud solutions or opting out of a homelab entirely. Keen to see more in-depth content on this-keep up the great work!

[@hassanfazeel2354]

Also, please teach how to prevent DNS servers from getting hacked in upcoming videos.

[@erla5768]

Thank you so much for your content. You offer a lot of young people a perspective.

[@shahzadkhalid]

Awesome way to explain … I will use this way to educate others on dns ……keep making good videos chuck

[@Iamolivialondon]

yooo, the comedy in this video really helps me to grasp the concept! Especially mafia boss!

[@moslimislam5714]

Perfect timing. I recently took a deep dive into multiple ways to do a MITM attack. DNS spoofing is one of them.

[@stevenkenney9473]

Nice work, you nailed it and made it entertaining. I will refer my students to this.

[@steph_in_tech]

I have learned so many cool and useful things from this channel. Good job Chuck!!❤

[@curtijam6302]

Great video! Clear, concise, and fun. Love the content.

[@robbbaseee5081]

Thank you Chuck! You are an amazing teacher and you make the mundane fun ❤

[@Ari-pq4db]

I love this, this is packed with so much knowledge. Keep them coming ❤❤❤

[@utkarshakya]

You don't have the Idea how much I Learn from your videos. I'm kid from INDIA, and I request you don't stop it. ❤

[@warrendlm1]

I just started Network+ I love learning about this stuff

[@MaameYaa-wl6if]

I love your teachings it has helped a lot

[@infinityminuszero]

Pablo knows everything. Pablo is the goat.

[@Kurplix]

Just finished my cup of coffee. Now I'm ready for this video!

[@jarbystark]

i dont drink coffee at all and work in IT for 17 years. im an imposter

[@StoneColdSolidus]

I'm in IT for 75+ years I can't do it without steroids and painkillers

[@keithjenkins6232]

1. Great job on this explanation! Def helped to better understand DNS! 2. It is funny that Bernard's phone number goes to a McDonalds in San Jose, CA! lol

[@Seedlinux]

One of the best DNS video explanation I have seen. Kudos.

[@hiimnew1221]

Chuck your videos are always top-notch and easy to understand especially with the schematics and your lovely personality but please for the love of god make something that doesn't require a credit card, every time I'm following along with a tutorial I get halfway through then I'd have to sign up with a credit card-- please think of the rest of us who might not have credit cards and aren't from the US

[@aayushghale3128]

I just finished my CNS exam and now i get recommended this vid😂

[@Reaper_1994]

Hey, will you ever do a WiFi 7 video explained similar to the WiFi 6 video? Or have you done one already and I've missed it? You're the reason I was excited for WiFi 6 and it has now filtered down to my team mates as well who have been helping upgrading our customers.

[@nightmarenova6748]

"there is no spoon" Awesome video as always Chuck! I was just in the process of choosing between self-hosted AdGuard and NextDNS

[@shivanagendra2406]

Which command used to get answer? Im strucked

[@nightmarenova6748]

@@shivanagendra2406 i used the "dig" command and im also in Linux, not on Windows, don't know if Windows has that cli command

[@shivanagendra2406]

@@nightmarenova6748 ok tq

[@maleeshamevan]

Im a fan of chuck. Really Love you and your contents

[@javierahermosilla8734]

You have the best tech videos fr

[@blacksunXX]

From one Chuck to another; you rock, dude!

[@Aurian_]

honestly i hate your coffee breaks but i love your content 😅

[@JeffGeerling]

#ItWasDNS

[@Supermath101]

Did you get deep-sleep on the Raspberry Pi Pico 2 working yet?

[@shonastudies]

Only one comment 😅 lemme fix that 🎉

[@Rohan-rb5le]

I finally went to a micro center for the first time. Sadly i live in switzerland, i dont have a micro center :(

[@Rohan-rb5le]

Got a raspberry pi 5 there

[@bendadziegh24]

Solid video. Thanks for the kind words in your secret message too.

[@miguelfmsmac]

Your videos are awesome...Can you please share what software/hardware you are using to present your tutorials on the screen (freehand writing) with all the diff colors and stuff. BTW, I'm using a MAC computer. Thanks!

[@GeorgeVina]

Loved this video! How do you make concepts so easy to understand? .... there is no spoon

[@ionamygdalon2263]

Really looking forward to PART 2 😁

[@raffiepro]

even back then most people didn't really remember any phone numbers apart from their own, they used phone books (or whatever they were called)

[@ATR-rw5ie]

Please make a practical video on each and every protocol you know....❤❤

[@brandondyck20]

Check with different domain hosting sites, they won't charge you for WHOIS while some do. Find it irritating they charge for that kind of feature.

[@Sujith_Nexis]

Good Explanation bruh👍👍👍👍

[@reDD9869]

My stub has been quite resolved, thank you.

[@moggel_puh7470]

Yes, "there is no spoon"! Thx for this great lesson!

[@kaltonian]

Thanks chuck, i will watch this another 2 times just so that it sticks in my head, the video caught my attention because my pc was asking me about it, at the time i didn't know, so when i saw this i thought ahhh.....nice 1 chuck, so yeah nice one and thanks chuck, oh one more thing....should i continue to use a vpn as well as dns protection ?

[@LiamRoss-tk2qo]

I like network Chuck. And I like his presentation style. But who is the Bob Ross of cyber security? ;)

[@سراياالقدس-ل1ذ]

Professor, thank you for your efforts. I am following you and one of your fans. I am a beginner student. If you would be so kind, I would like the correct steps to implement a man-in-the-middle attack on the network and access the devices connected to the network.Thank you very much.

[@HeathenHacks]

5:10 lmao at the *Kokey* reference. 😂

[@simple_networks]

Very informative, as per usual! A couple of questions. If I am connect through a VPN service, like ExpressVPN, are my DNS requests routed through there as well, or are they traveling separately (and therefore exposed) from my actual web traffic. Second question, are your ISPs DNS servers also "recursive" similar to your Google example?

[@sylaan]

Yes (normally) and yes.

[@LowellAlb]

Loved that old fashioned telephone -> 0:39

[@lassebrustad]

I was looking for a comment like this, while I've paused the video at that timestamp 😂 now everyone can call him

[@Finito54ify]

I love the reference from Matrix, one of the reasons why IT fascinates me so much - "there is no spoon"

[@justinjones9042]

That was very informative.

[@noeldunienville199]

I absolutely love this Guys content 🤗

[@ricardoadamec-qy1xd]

I wanted to create my own authoritative DNS server but it was kinda scary to configure something then switch it from cloudflare, then wait and pray that my services will work when DNS changes are fully propagated. Now i think i have better understanding of different types records so i think i will do it sometime soon. Anyway where is that spoooon ;D

[@KickingitwiththeKrays]

there is no spoon. Loved this video , Awsome !!

[@tubeDude48]

Well done, Chuck! 👍

[@nraelserutluc8669]

GD bless you and family Mr Chuck. Ty, I thank the LORD for filling you w/HIS purpose and your desire to share

[@Shubham-Mishra]

Yeah CCNA ❤ networking video 🎉❤

[@javajoint]

the followup video (or perhaps you have already done this one?) : now that I have resolved the DNS address to an IP address, how do I get to the server via the IP address? (basically: part 2)

[@jlbruiser]

This guy is really good like damn🤯

[@robertbishop7078]

I have Quad9 and security.cloudflare-dns configured using DNS over TLS setup in my router. In case 1 goes down, I have a backup. I figure this protects all devices on my network from 'known' malware. The Asus router uses normal DNS for its checks, I wish it would use the DNS over TLS. But all client traffic uses the DNS over TLS. I know this as I had NextDNS setup for awhile and that was how the traffic looked like in the logs. I also have the non-secure DNS using quad9 and security.cloudflare-dns. In my travel router, I use Cloudflare over TLS. Figure another layer of protection while in a hotel or other unknown network is a good thing.

[@geisterkind1]

there is no spoon .... Thanks NetworkChuck!! You are awesome too, take a sip of coffee

[@kevinoneill2170]

11:38 Waldo got a glow up. Drippy.

[@HossamTalaat-nk7hf]

waiting for part two boss ✊

[@skkcyber]

mentioned Philippines. Mabuhay Network Chuck! :)

[@B2DT11B]

It is crazy to think about DNS files being measured in kbs and a simple txt file. Paul Mockpetris earned his Hall of Fame recognition. The internet is awesome.

[@exrog]

I didn't understand a word you said, but I loved it anyway. 😅

[@未来私]

There you are with another awesome video. Is there anything you can't make easy to understand. No is probably the answer to that question, but maybe there is one subject, cars, wood...SPOONS!! Spoon, I'm sure you can't make a spoon interesting, I challenge you.

[@chokoloytv8776]

Hey sir chuck, can you explain what is the purpose of APN?

[@romanlee8287]

Learned a lot!

[@lindomachi8419]

well i went to your website, and its really cool. Nostalgic arcade theme,

[@dhruvhim]

A raspberry pi with pihole installed and you can use dns over https with cloud flare. Or go with unbound if you are more concerned with using cloud flare and quad eight.. Secure dns for whole home.

[@Cr4zYH3aD]

Fantastic video for learning!

[@sahelikantha93]

Can anyone tell me if the CCNA course with 24 videos on this channel a complete and exhaustive series? Or there are going to be more videos in that playlist??

[@dfoy7266]

I am curious about this as well

[@technopc2953]

DOH is nice. Not enough though. The resolver is still vulnerable if the remote zone is not dnssec enabled. (Also, making your own recursive resolver is cool) (Also, there is no spoon)

[@stanzo89]

I wish you would do a video like this explaining Handshake $HNS TLD's. That is the ultimate way to get away from those "mob bosses" regarding ICANN. Not your keys, not your domain.

[@balajisharathkumar9753]

even cisco umbrella use doh method for their dns activities any way thanks for sharing , great video chunk

[@efromme]

Great for a review, also meme game strong. About lost it at Mr cool ice 😂

[@as_if]

1. Couldn't understand TXT records.

[@Milhouz]

How am I supposed to eat my cereal when "there is no spoon"!

[@thepcformula]

Slurp it

[@DrumsOFONEDESIGN]

Or stir my coffee?!

[@giannakossimos1]

there is no such a thing.. forget it

[@Devil-qn4gm]

Hand

[@scymic]

There is no spoon. Did you know if you stir your coffee, then constantly tap the bottom with a spoon the sound changes while the coffee is slowing down?

[@kafkaMt]

So should I use AdGuard or Twingate to set my own DNS and block the ads for all my devices? Because apparently TG uses its own DNS to resolve, while AG relies on different DNS servers.

[@comosaycomosah]

hey! whats your ps1 setting thing?? im assuming your using starship but im not familiar with that particular one and really like it. i see its windows but the yellow color is cool

[@bryangichuru9]

"there is no spoon" this was really fun!

[@valentinDS96]

What writing app are you using? Thanks

[@Justin-co9sw]

Thank you Chuck!

[@obi1jim316]

7:05 what's happening here, I don't get it. My mind is in the gutter, there's got to be another way to interpret this. :|

[@halfxyou]

Chuck, would love for you to show us how to self host a DNS server using Quad9 on a Pi-Hole

[@gent2205]

Something else that's fun with DNS. You can use DNScat to perform data exfil.