Re: Dns tunnel detection/prevention

2025-05-23 Thread Michael De Roover
On Saturday, May 24, 2025 3:53:57 AM CEST Fred Morris wrote: > On Fri, 23 May 2025, Grant Taylor via bind-users wrote: > > I don't think there is anything that I would describe that way. But there > > may be some rate limiting option(s) that you could use to at least cripple > > using DNS queries

Re: Dns tunnel detection/prevention

2025-05-23 Thread Grant Taylor via bind-users
On 5/23/25 8:53 PM, Fred Morris wrote: If you fail in an outright, reproducible, measurable fashion you give your opponent predictability and confidence. As a defender you want to undermine that and look like an under-resourced, poorly administered network that somehow, we don't know exactly ho

Re: Dns tunnel detection/prevention

2025-05-23 Thread Fred Morris
On Fri, 23 May 2025, Grant Taylor via bind-users wrote: On 5/22/25 9:23 AM, Karol Nowicki via bind-users wrote: Does ISC Bind software by native has any dns tunneling prevention embedded ? I don't think there is anything that I would describe that way. But there may be some rate limiting

Re: Dns tunnel detection/prevention

2025-05-23 Thread Grant Taylor via bind-users
On 5/22/25 9:23 AM, Karol Nowicki via bind-users wrote: Does ISC Bind software by native has any dns tunneling prevention embedded ? I don't think there is anything that I would describe that way. But there may be some rate limiting option(s) that you could use to at least cripple using DNS

Re: Migration to inline-signing

2025-05-23 Thread Crist Clark
I tried it again to get the logs, *21-May-2025 20:57*:12.064 general: zone sub.example.com/IN/internal: (primary) removed *21-May-2025 20:57*:12.064 general: reloading configuration succeeded *21-May-2025 20:57*:12.064 general: scheduled loading new zones *21-May-2025 20:57*:12.511 zoneload: zo