2020-05-25 07:54:40 +00:00
|
|
|
id: filter-wildcard
|
2020-04-28 01:34:56 +00:00
|
|
|
|
|
|
|
info:
|
|
|
|
name: Wildcard Filter
|
2020-05-25 07:54:40 +00:00
|
|
|
author: mzack9999
|
2020-06-24 21:07:58 +00:00
|
|
|
severity: informative
|
2020-04-28 01:34:56 +00:00
|
|
|
|
|
|
|
dns:
|
2020-05-25 07:54:40 +00:00
|
|
|
- name: "0831058744.{{FQDN}}" # Random prefix
|
|
|
|
type: A
|
|
|
|
class: inet
|
|
|
|
recursion: true
|
|
|
|
retries: 3
|
|
|
|
matchers:
|
2020-04-28 01:34:56 +00:00
|
|
|
- type: word
|
2020-05-25 07:54:40 +00:00
|
|
|
words:
|
2020-04-28 01:34:56 +00:00
|
|
|
- "NXDOMAIN"
|
|
|
|
- "SERVFAIL"
|
2020-05-25 07:54:40 +00:00
|
|
|
- "REFUSED"
|