Hello community,
These days iam making some tests in a virtual enviromet that i have set up.
I use Ettercap to make a dns spoof attack.
The attack works well but i have some questions.
The first question is that, how the attacks works with the iptables line in etter.conf commented?
When i uncomment these lines, i have the following error: "Fatal: Cant insert firewall redirects".
The second question, when the attack is working, i open wireshark and i cannot see any dns requests from the attacker.
However, if i do nslookup from the client to the website i chosen in the etter.dns file, the results return the IP specified again in the etter.dns file.
I dont know it seems really weird and i would like to ask you for help, because i rly want to understand how this attack works.
Thanks in advace.
These days iam making some tests in a virtual enviromet that i have set up.
I use Ettercap to make a dns spoof attack.
The attack works well but i have some questions.
The first question is that, how the attacks works with the iptables line in etter.conf commented?
When i uncomment these lines, i have the following error: "Fatal: Cant insert firewall redirects".
The second question, when the attack is working, i open wireshark and i cannot see any dns requests from the attacker.
However, if i do nslookup from the client to the website i chosen in the etter.dns file, the results return the IP specified again in the etter.dns file.
I dont know it seems really weird and i would like to ask you for help, because i rly want to understand how this attack works.
Thanks in advace.

