Patent ID: 7620733

Claim:
A method for authenticating a source IP address of a Domain Name System (DNS) request sent using a connectionless protocol to a DNS server, the method comprising: creating a new DNS zone in the server, exclusively for authentication; designating the server as the only authoritative server for said new DNS zone in a global DNS network; intercepting the DNS request; responsively to the DNS request: creating, by said only authoritative server for said new DNS zone, a new canonical domain name belonging to said new DNS zone, exclusively for authentication; sending by said only authoritative server for said new DNS zone a DNS response to the source IP address, wherein said DNS response solicits a client at the source IP address to send a DNS request containing a query for said new canonical domain name, using the connectionless protocol; receiving, using the connectionless protocol at said only authoritative server for said new DNS zone, a second DNS request containing a query for a requested domain name; comparing said requested domain name to said new canonical domain name; and assessing an authenticity of the source IP address based on a result of said comparing said requested domain name to said new canonical domain name.