nanog mailing list archives

Re: NXDOMAIN Resolvers


From: Thomas Mieslinger <miesi () mail com>
Date: Thu, 21 Apr 2022 12:30:51 +0200

There are public and commercial offerings for "DNS based protection".

e.g. 9.9.9.9 automatically generates NXDomains for suspected malicious
DNS Names even in their free service.

They have a page where you can check if you have been blacklisted (see
https://www.quad9.net/de/result)


On 4/20/22 11:07, Antonia Affinito wrote:
Good morning,
I am currently analysing the DNS resolvers (local and public ones) in
terms of protection and performance (in particular their speed).
I noticed that, in case of a malicious domain name, some local resolvers
send an NXDOMAIN and others a courtesy page address. Do you know if the
resolvers (for example TIM, Wind or Fastweb) can return an NXDomain in
order to protect their clients?

Thanks a lot

<https://www.avast.com/sig-email?utm_medium=email&utm_source=link&utm_campaign=sig-email&utm_content=webmail>
        Mail priva di virus. www.avast.com
<https://www.avast.com/sig-email?utm_medium=email&utm_source=link&utm_campaign=sig-email&utm_content=webmail>


<#DAB4FAD8-2DD7-40BB-A1B8-4E2AA1F9FDF2>


Current thread: