DNS Tunnel Mitigation v2

Problem this snippet solves: (Solution from Pedro Haoa) Due to some people attempt DNS tunneling to pass data frames inside of DNS records to the Internet and the lack of information around her...
Published Jun 19, 2019
Version 1.0
AFM
BIG-IP DNS
dns tunneling
security
JRahm's avatar
Icon for Admin rankAdmin
Christ Follower, Husband, Father, Technologist. I love community and I especially love THIS community. My background is networking, but I've dabbled in all the F5 iStuff, I'm a recovering Perl guy, and am very much a python enthusiast. Learning alongside all of you in this accelerating industry toward modern apps and architectures.
View Profile
JRahm's avatar
Icon for Admin rankAdmin
Christ Follower, Husband, Father, Technologist. I love community and I especially love THIS community. My background is networking, but I've dabbled in all the F5 iStuff, I'm a recovering Perl guy, and am very much a python enthusiast. Learning alongside all of you in this accelerating industry toward modern apps and architectures.
View Profile
Hoang_Hung's avatar
Hoang_Hung
Icon for Cirrus rankCirrus
Jul 15, 2021

Thanks

But I dont understand " why [DNS::len] > 512 and domain [DNS::question name] 4 "

 

Plz explain help me

 

Thanks

Hung Hoang