3 ms·
People used to use DNS Tunneling to get free internet in a captive portal, so a lot of data was getting transmitted in DNS packets.
by Dwedit 4y ago
People used to use DNS Tunneling to get free internet in a captive portal, so a lot of data was getting transmitted in DNS packets.
- ipdashc 4y agoIs DNS tunneling not used anymore? I've been thinking of setting one up recently
- hsbauauvhabzb 4y agoIt’s used by malware, and detectable via high entropy nature of the traffic (most domains don’t have thousands of txt records containing b64). Recently I sent a 1mb file over dns, which terminated abruptly, I suspect dns resolvers blacklisted the domain. It also multiplies bandwidth by at least 2-3x I think, so I’d call it bad etiquette to use unless you have a very very good reason to.
- ipdashc 4y agoGotcha, I see. I just wanted to use it to get around captive portals when necessary, but if DNS blacklisting is an issue, oof...
- ev1 4y agoive seen a few only allow their resolver to be used to resolve specific A records, like just enough to pay/check out.
- hsbauauvhabzb 4y agoWhat I mean is I suspect upstream resolvers (google, cloud flare, etc) blocked my domain from resolving any cache misses.
- siraben 4y agoThis still works in a lot of circumstances with iodine[0], including several US domestic flights. [0] https://github.com/yarrick/iodine https://github.com/yarrick/iodine
- jlokier 4y agoI used to use ICMP Echo tunnelling, and had really fast internet compared to the rest of the 50 person office, which had a heavily throttled link except for ICMP.