Block DNS exfiltration with dnsmasq proxy - Magnus Longva - NDC Security 2023

DNS exfiltration is a much-overlooked communications channel which bad actors can use to call home from behind thick firewalls. Usually, a backend component will only need to look up DNS records in a short list of zones, but because of the recursive nature of DNS, it's not possible to allowlist DNS in the IP layer. In this talk, I will both demonstrate how hackers use DNS to exfiltrate data, and how you can mitigate this threat by equipping your application with a dnsmasq sidecar. Check out our new channel: NDC Clips: ‪@ndcclips‬ Check out more of our featured speakers and talks at https://ndcconferences.com/ https://ndc-security.com/