NXDOMAIN Resolvers

Thomas Mieslinger miesi at mail.com
Thu Apr 21 10:30:51 UTC 2022


There are public and commercial offerings for "DNS based protection".

e.g. 9.9.9.9 automatically generates NXDomains for suspected malicious
DNS Names even in their free service.

They have a page where you can check if you have been blacklisted (see
https://www.quad9.net/de/result)


On 4/20/22 11:07, Antonia Affinito wrote:
> Good morning,
> I am currently analysing the DNS resolvers (local and public ones) in
> terms of protection and performance (in particular their speed).
> I noticed that, in case of a malicious domain name, some local resolvers
> send an NXDOMAIN and others a courtesy page address. Do you know if the
> resolvers (for example TIM, Wind or Fastweb) can return an NXDomain in
> order to protect their clients?
>
> Thanks a lot
>
> <https://www.avast.com/sig-email?utm_medium=email&utm_source=link&utm_campaign=sig-email&utm_content=webmail>
> 	Mail priva di virus. www.avast.com
> <https://www.avast.com/sig-email?utm_medium=email&utm_source=link&utm_campaign=sig-email&utm_content=webmail>
>
>
> <#DAB4FAD8-2DD7-40BB-A1B8-4E2AA1F9FDF2>


More information about the NANOG mailing list