nanog mailing list archives
Re: DNS TXT field usage ?
From: Joe Provo <nanog-post () rsuc gweep net>
Date: Sun, 28 Mar 2010 08:34:26 -0400
On Sun, Mar 28, 2010 at 02:04:39PM +0200, jul wrote:
Hello, While watching some parked domains, I recently observed one which has a TXT field containing some crypto value, something like a ssh key/RSA 512 or 1024 output (only the crypto part 'cvxvcvcxvcxv=' ).
If the TXT data is a large wodge which changes, and/or there are fluctuating interesting labels within the zone, then it isn't parked but is being used for IP-over-DNS tunneling. Cheers, Joe -- RSUC / GweepNet / Spunk / FnB / Usenix / SAGE
Current thread:
- DNS TXT field usage ? jul (Mar 28)
- Re: DNS TXT field usage ? Joe Provo (Mar 28)
- RE: DNS TXT field usage ? Tarig Yassin (Mar 29)
- Re: DNS TXT field usage ? Douglas Otis (Mar 29)