Infoblox’s global team of threat hunters uncovers a DNS operation with the ability to bypass traditional security measures and control the Great Firewall of China. Read about “Muddling Meerkat” and the many other threat actors discovered by Infoblox Threat Intel here.

NIOS DNS DHCP IPAM

Reply

Reasons for DNS proxy server establishing connections to AWS on port 443?
Laura203
Authority
Posts: 33

‎04-10-2021 07:54 AM

1916     0

We have an internal recursive server configured to proxy DNS requests for public domains for B1TD and I see quite a few connections to AWS IPs on port 443 and am wondering if there's a valid reason for that.

We do have some internal forwarding domains set up, but I would expect those to use port 53 and none are explicitly hosted by Amazon.

Labels:
Reply
0 Kudos

Re: Reasons for DNS proxy server establishing connections to AWS on port 443?
paulr
Expert
Posts: 187

‎04-12-2021 06:04 AM

1917     0

Maybe you have some clients trying to do DoH?

Paul Roberts
PCN (UK) Ltd

All opinions expressed are my own and not representative of PCN Inc./PCN (UK) Ltd. E&OE
Reply
0 Kudos
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Search instead for 
Did you mean: 

Recommended for You

Latest Annoucements

Infoblox Experts Community

You have reached the maximum number of topics allowed as a visitor. Please Login or Join the community to continue to read.

Join for free

TOPICS REMAINING

Register for unlimited browsing. Registration is FREE.

Join Community