Show Posts
1
Intrusion Detection and Prevention / Constant DNS queries for opnsense.emergingthreats.net
« on: January 30, 2023, 08:38:49 pm »
After enabling Unbound DNS reporting I am seeing over 40,000 DNS queries for opnsense.emergingthreats.net over the course of six hours.
I am using Unbound (no blocklist) on opnsense with DoT to nextdns.
The queries all Pass and come back NOERROR with the vast majority being answered from Cache.
Since the queries are mostly being answered from cache they don't show up on nextdns, which is why I had not noticed before.
To be clear the queries are also not being blocked by nextdns.
Is anyone else seeing this issue, or know how to fix it?
Thanks.
I am using Unbound (no blocklist) on opnsense with DoT to nextdns.
The queries all Pass and come back NOERROR with the vast majority being answered from Cache.
Since the queries are mostly being answered from cache they don't show up on nextdns, which is why I had not noticed before.
To be clear the queries are also not being blocked by nextdns.
Is anyone else seeing this issue, or know how to fix it?
Thanks.