Signature Detail
Short Name |
DNS:AUDIT:AAAA-RR |
|---|---|
Severity |
Info |
Recommended |
No |
Category |
DNS |
Keywords |
IPv6 Teredo tunneling DNS RR |
Release Date |
2011/04/12 |
Update Number |
1901 |
Supported Platforms |
idp-4.0+, isg-3.0+, j-series-9.5+, mx-9.4+, srx-9.2+, srx-branch-9.4+, vsrx-12.1+ |
DNS: IPv6 Resource Record Request
This signature detects IPv6 Resource Record (RR) requests. The requesting client is configured to use IPv6 either natively or via a tunneling solution, such as Teredo, 6to4, ISATAP, or other IPv6 tunnel brokers. Such tunneled traffic is not inspected by the IDP and could be an evasion attempt.
References