Re: [Pdns-users] Injection Attacks Reloaded: Validating hostnames?

2021-08-16 Thread Remi Gacogne via Pdns-users
Hi Christoph, On 8/14/21 1:11 PM, Christoph via Pdns-users wrote: We were wondering if there is an easy way in Recursor's configuration to enable validation of hostnames similar to their python proof of concept [4]? We don't have such an option at the moment, although it would not be too har

Re: [Pdns-users] Prevent external lookup of (private) subdomains

2021-08-16 Thread informant--- via Pdns-users
August 16, 2021 10:10 AM, "informant--- via Pdns-users" wrote: > I'm not too familiar with DNS updates, but am I understanding it correctly > that it would be setup > like so: > > I set up two different DNS servers, one public and one private. I delegate > int.example.com to the > public serv

Re: [Pdns-users] Prevent external lookup of (private) subdomains

2021-08-16 Thread informant--- via Pdns-users
I'm not too familiar with DNS updates, but am I understanding it correctly that it would be setup like so: I set up two different DNS servers, one public and one private. I delegate int.example.com to the public server in our global DNS. The private server will serve the actual subdomain record