|
In many firewall configurations it's common to blindly allow UDP source port 53 packets, for DNS
It is unfortunately also common for black hats to use UDP source port 53 packets for other purposes, to bypass many common firewalls
We can utilize Net::DNS::Packet to perform payload inspection, to permit only true DNS packets
continued...
|