DNS Tunnel Mitigation v2

Problem this snippet solves: (Solution from Pedro Haoa) Due to some people attempt DNS tunneling to pass data frames inside of DNS records to the Internet and the lack of information around her...
Published Jun 19, 2019
Version 1.0
AFM
BIG-IP DNS
dns tunneling
security
Hoang_Hung's avatar
Hoang_Hung
Icon for Cirrus rankCirrus
Jul 15, 2021

Thanks

But I dont understand " why [DNS::len] > 512 and domain [DNS::question name] 4 "

 

Plz explain help me

 

Thanks

Hung Hoang