Re: NXDOMAIN Resolvers

2022-04-21 Thread Thomas Mieslinger
There are public and commercial offerings for "DNS based protection". e.g. 9.9.9.9 automatically generates NXDomains for suspected malicious DNS Names even in their free service. They have a page where you can check if you have been blacklisted (see https://www.quad9.net/de/result) On 4/20/22

RE: NXDOMAIN Resolvers

2022-04-20 Thread Brian Turnbow via NANOG
a paid service , others include it and all are required to block the agcom,CNCPO etc requests. Brian From: NANOG On Behalf Of Antonia Affinito Sent: Wednesday, April 20, 2022 11:07 AM To: nanog@nanog.org Subject: NXDOMAIN Resolvers Good morning, I am currently analysing the DNS resolvers

Re: NXDOMAIN Resolvers

2022-04-20 Thread Matthew Pounsett
On Wed, Apr 20, 2022 at 11:00 AM Antonia Affinito < antoniaaffinit...@gmail.com> wrote: > Good morning, > I am currently analysing the DNS resolvers (local and public ones) in > terms of protection and performance (in particular their speed). > I noticed that, in case of a malicious domain name, s

Re: NXDOMAIN Resolvers

2022-04-20 Thread William Herrin
On Wed, Apr 20, 2022 at 8:39 AM William Herrin wrote: > On Wed, Apr 20, 2022 at 8:00 AM Antonia Affinito > wrote: >> >> I noticed that, in case of a malicious domain name, some local resolvers >> send an NXDOMAIN and others a courtesy page address. Do you know if the >> resolvers (for example

Re: NXDOMAIN Resolvers

2022-04-20 Thread William Herrin
On Wed, Apr 20, 2022 at 8:00 AM Antonia Affinito < antoniaaffinit...@gmail.com> wrote: > I noticed that, in case of a malicious domain name, some local resolvers > send an NXDOMAIN and others a courtesy page address. Do you know if the > resolvers (for example TIM, Wind or Fastweb) can return an N

NXDOMAIN Resolvers

2022-04-20 Thread Antonia Affinito
Good morning, I am currently analysing the DNS resolvers (local and public ones) in terms of protection and performance (in particular their speed). I noticed that, in case of a malicious domain name, some local resolvers send an NXDOMAIN and others a courtesy page address. Do you know if the resol