[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

random dns queries with random sources

Subject: random dns queries with random sources
From: simon.perreault at viagenie.ca (Simon Perreault)
Date: Wed, 19 Feb 2014 11:32:49 -0500
In-reply-to: <[email protected]>
References: <[email protected]> <2AF841AB78217140A2A394B2BB6D39C5037B41EE@IDCPRDMBX2.ads.integratelecom.com> <[email protected]>

Le 2014-02-19 11:28, Dobbins, Roland a ?crit :
>> I am late to this train, but it appears no one else has brought this up.  It is a DNS tunneling setup, not an attack. 
> 
> This makes a lot of sense - good insight, will look into this further!

I use this for free wi-fi in airports and such:

http://code.kryo.se/iodine/

If the wi-fi is configured to use an open resolver, we end up with the
situation you describe.

Simon
-- 
DTN made easy, lean, and smart --> http://postellation.viagenie.ca
NAT64/DNS64 open-source        --> http://ecdysis.viagenie.ca
STUN/TURN server               --> http://numb.viagenie.ca

Follow-Ups:
- random dns queries with random sources
  - From: tempestterror at gmail.com (Tempest)

References:
- random dns queries with random sources
  - From: jmaimon at ttec.com (Joe Maimon)
- random dns queries with random sources
  - From: Davis.Beeman at integratelecom.com (Beeman, Davis)
- random dns queries with random sources
  - From: rdobbins at arbor.net (Dobbins, Roland)

Prev by Date: random dns queries with random sources
Next by Date: random dns queries with random sources
Previous by thread: random dns queries with random sources
Next by thread: random dns queries with random sources
Index(es):
- Date
- Thread