Conversation

Notices

1. Embed this notice
   sahilister (sahil@toots.sahilister.in)'s status on Saturday, 09-Nov-2024 00:16:16 JST sahilister

   Checking all DNS records at once through `any` parameter is fun.

   See `dig any cloudflare.com` is fun.

   • Embed this notice
     sahilister (sahil@toots.sahilister.in)'s status on Saturday, 09-Nov-2024 00:19:07 JST sahilister

     in reply to

     Though `any` DNS record type has been infamous for being (ab)used for carrying out DNS amplification attacks as it generates heavy DNS payload in response. See https://blog.cloudflare.com/deep-inside-a-dns-amplification-ddos-attack/ for example

     #DNS

   • Embed this notice
     sahilister (sahil@toots.sahilister.in)'s status on Saturday, 09-Nov-2024 00:20:55 JST sahilister

     in reply to

     So RFC8482 (https://www.rfc-editor.org/rfc/rfc8482) was created to mitigate this as `any` records are rarely used for legitimate purposes.

     Found from `dig any fastly.com`

     #DNS #is #fun