WPADをDNSから引いてみる

Windows 8でもWPAD（Web Proxy Auto-Discovery Protocol）を使う方法がお勧めだそうな。
確かにクライアントして非常に便利なこの機能も、サーバーから見ると問題をはらんでいたりします。
DHCPを使う方法なら良いのですが、DNSを使う方法ですと、WPADが自動探索で変な情報が返されてヤヴァイページに誘導（*1）される可能性があります。

これを防ぐため、Windows Server 2008以降では、WPADは「グローバルクエリ禁止リスト」に追加されています。この状態では、クライアントがWPADをDNSのクエリで情報が得られません(*2)

というとこで、ちゃんとWPADのエントリ先に情報があってクライアントに返せることが確認できたらグローバル禁止リストから外してあげましょう(*3)。
デフォルトでは、wpadとisatapが登録されています。以下のコマンドから何が登録されているのかを確認の上、wpadを外して再登録しましょう

■確認用のコマンド dnscmd /info /globalqueryblocklist ■リストの更新（wpadとisatapが登録されていたので、isatapのみにする） dnscmd /config /globalqueryblocklist istap

元に戻すには、再度wpadを追加してください。 dnscmd /config /globalqueryblocklist wpad istap

*1:「Microsoft WindowsにおけるWebプロキシ自動発見（WPAD）の脆弱性に関する注意喚起」
http://jprs.jp/tech/notice/2007-12-21-Web-Proxy-Auto-Discovery-alert.html
「グローバルクエリ禁止リストを管理する」
http://technet.microsoft.com/ja-jp/library/cc794902(WS.10).aspx

*2:グローバルクエリ禁止リストに追加された状態でクライアントからクエリがあった時(警告:7600 ソース：DNS)

*3:DNS 禁止リストからの WPAD の削除
http://technet.microsoft.com/ja-jp/library/cc441517.aspx

投稿日時 : 2013年2月2日 23:38

Feedback

# Windows 8 ?????????????????????????????????????????? « Hebikuzure's Tech Memo 2013/02/03 7:49 Pingback/TrackBack

Windows 8 ?????????????????????????????????????????? « Hebikuzure's Tech Memo

# It's an awesome paragraph in support of all the web users; they will get advantage from it I am sure. 2018/10/06 9:25 It's an awesome paragraph in support of all the w

It's an awesome paragraph in support of all the web users; they will get advantage from it I
am sure.

# For latest information you have to pay a quick visit world wide web and on internet I found this website as a best site for most recent updates. 2018/10/23 6:14 For latest information you have to pay a quick vis

For latest information you have to pay a quick visit world wide web
and on internet I found this website as a best site for most recent updates.

# My brother suggested I might like this blog. He was totally right. This post actually made my day. You cann't imagine simply how much time I had spent for this information! Thanks! 2018/10/28 3:14 My brother suggested I might like this blog. He wa

My brother suggested I might like this blog. He was totally
right. This post actually made my day. You cann't imagine simply how much
time I had spent for this information! Thanks!

# Heya i'm for the first time here. I came across this board and I find It really useful & it helped me out a lot. I hope to give something back and aid others like you helped me. 2018/10/28 7:46 Heya i'm for the first time here. I came across th

Heya i'm for the first time here. I came across this board and I
find It really useful & it helped me out a lot. I hope to give something back and
aid others like you helped me.

# Hey there! I know this is kinda off topic but I'd figured I'd ask. Would you be interested in exchanging links or maybe guest writing a blog post or vice-versa? My blog goes over a lot of the same topics as yours and I feel we could greatly benefit from 2019/05/11 23:21 Hey there! I know this is kinda off topic but I'd

Hey there! I know this is kinda off topic but I'd figured I'd ask.
Would you be interested in exchanging links or maybe guest writing a blog post or
vice-versa? My blog goes over a lot of the same topics as
yours and I feel we could greatly benefit from each other.

If you might be interested feel free to send me an e-mail.
I look forward to hearing from you! Superb blog by the
way!

タイトル
名前
Url
コメント
名前をブラウザに記憶する

# Windows 8 ?????????????????????????????????????????? « Hebikuzure's Tech Memo 2013/02/03 7:49 Pingback/TrackBack

# It's an awesome paragraph in support of all the web users; they will get advantage from it I am sure. 2018/10/06 9:25 It's an awesome paragraph in support of all the w

# For latest information you have to pay a quick visit world wide web and on internet I found this website as a best site for most recent updates. 2018/10/23 6:14 For latest information you have to pay a quick vis

# My brother suggested I might like this blog. He was totally right. This post actually made my day. You cann't imagine simply how much time I had spent for this information! Thanks! 2018/10/28 3:14 My brother suggested I might like this blog. He wa

# Heya i'm for the first time here. I came across this board and I find It really useful & it helped me out a lot. I hope to give something back and aid others like you helped me. 2018/10/28 7:46 Heya i'm for the first time here. I came across th

PCだい「ちゅき」

目次

Blog 利用状況

ニュース

書庫

日記カテゴリ

ギャラリ

コミュニティ

相互リンク