Messages

1

Intrusion Detection and Prevention / Re: Constant DNS queries for opnsense.emergingthreats.net

« on: November 13, 2024, 06:00:39 am »

After enabling Unbound DNS reporting I am seeing over 40,000 DNS queries for opnsense.emergingthreats.net over the course of six hours.

I am using Unbound (no blocklist) on opnsense with DoT to nextdns.
The queries all Pass and come back NOERROR with the vast majority being answered from Cache.
Since the queries are mostly being answered from cache they don't show up on nextdns, which is why I had not noticed before.
To be clear the queries are also not being blocked by nextdns.

Is anyone else seeing this issue, or know how to fix it?

Thanks.

Excessive DNS query issue for opnsense.emergingthreats.net within six hours when using Unbound DNS on OPNsense, while users search for solutions to minimize the continuously generated traffic.

poppy playtime chapter 3