Re: underscores in A queries

2021-04-09 Thread Ondřej Surý
Those are qname minimization queries. Because DNS implementations (especially in load-balancers) are so broken, the qname minimizing resolver can’t ask for: IN NS because that often doesn’t work, but when it asks: _. IN A the resolver will get the correct answer. Unfortunately, this is the

Re: underscores in A queries

2021-04-09 Thread Lee
On 4/9/21, John W. Blue via bind-users wrote: > It would seem that underscores is one of those characters in DNS that leads > a double life. > > RFC’s say that underscores are disallowed for use in hostnames Right. But it's **hostnames** and not everyone enforces that rule :( > but SRV > record

RE: underscores in A queries

2021-04-09 Thread John W. Blue via bind-users
-users@lists.isc.org Subject: underscores in A queries Hi, I've been parsing my query logs to watch for unusual/unexpected lookups, and I notice quite a few A queries with underscores, often in patterns like _.domainname.com often followed by _.xyz.domainname.co

underscores in A queries

2021-04-09 Thread Kevin K
Hi, I've been parsing my query logs to watch for unusual/unexpected lookups, and I notice quite a few A queries with underscores, often in patterns like _.domainname.com often followed by _.xyz.domainname.com or _.domainname.com.mydomain.com Can someone tell me what these are and wha