Signature Detail
Short Name |
DNS:TUNNEL:I2P-DNS-QUERY |
|---|---|
Severity |
Medium |
Recommended |
Yes |
Category |
DNS |
Keywords |
I2P Tunneling Software DNS Query |
Release Date |
2013/12/01 |
Update Number |
2323 |
Supported Platforms |
idp-4.0+, isg-3.0+, j-series-9.5+, mx-9.4+, srx-9.2+, srx-branch-9.4+, vsrx-12.1+ |
DNS: I2P Address Query
This signature detects I2P DNS requests from a client that is running the I2P tunneling software but has DNS mis-configured to send requests in the clear. Blocking on these queries will not stop the tunnel from working, but will indicate which clients are running the software.