Basic wildcard filtering by trying to resolve non existing subdomain

2020-04-28 03:34:56 +02:00 · 2020-04-28 03:34:56 +02:00 · cf6b85771b
parent d2fb671d3f
commit cf6b85771b
1 changed files with 20 additions and 0 deletions
--- a/dns/filter-wildcard.yaml
+++ b/dns/filter-wildcard.yaml
@ -0,0 +1,20 @@
+id: filter-wildcard 
+
+info:
+  name: Wildcard Filter
+  author: mzack9999 
+  severity: info
+
+
+dns:
+    - name: "0831058744.{{FQDN}}" # Random prefix
+      type: A
+      class: inet
+      recursion: true
+      retries: 3
+      matchers:
+      - type: word
+        words: 
+          - "NXDOMAIN"
+          - "SERVFAIL"
+          - "REFUSED"