Those are qname minimization queries.
Because DNS implementations (especially in load-balancers) are so broken, the
qname minimizing resolver can’t ask for:
IN NS
because that often doesn’t work, but when it asks:
_. IN A
the resolver will get the correct answer.
Unfortunately, this is the
On 4/9/21, John W. Blue via bind-users wrote:
> It would seem that underscores is one of those characters in DNS that leads
> a double life.
>
> RFC’s say that underscores are disallowed for use in hostnames
Right. But it's **hostnames** and not everyone enforces that rule :(
> but SRV
> record
-users@lists.isc.org
Subject: underscores in A queries
Hi,
I've been parsing my query logs to watch for unusual/unexpected lookups, and I
notice quite a few A queries with underscores, often in patterns like
_.domainname.com
often followed by
_.xyz.domainname.co
Hi,
I've been parsing my query logs to watch for unusual/unexpected lookups, and I
notice quite a few A queries with underscores, often in patterns like
_.domainname.com
often followed by
_.xyz.domainname.com
or
_.domainname.com.mydomain.com
Can someone tell me what these are and wha
4 matches
Mail list logo