nanog mailing list archives

Re: random dns queries with random sources


From: Simon Perreault <simon.perreault () viagenie ca>
Date: Wed, 19 Feb 2014 11:32:49 -0500

Le 2014-02-19 11:28, Dobbins, Roland a écrit :
I am late to this train, but it appears no one else has brought this up.  It is a DNS tunneling setup, not an 
attack. 

This makes a lot of sense - good insight, will look into this further!

I use this for free wi-fi in airports and such:

http://code.kryo.se/iodine/

If the wi-fi is configured to use an open resolver, we end up with the
situation you describe.

Simon
-- 
DTN made easy, lean, and smart --> http://postellation.viagenie.ca
NAT64/DNS64 open-source        --> http://ecdysis.viagenie.ca
STUN/TURN server               --> http://numb.viagenie.ca


Current thread: