dns

Overview ¶

Binary dns_sesame is a DNS server responding desired IP addresses.

It is useful against firewalls wanting a fixed set of domains and opening only on the IPs resolved.

Example usage:

go run dns_sesame.go -address :53 -suffix z.stalkr.net

How it works:

• choose a name ('test'), send a DNS request to set the IP e.g. dig 1.2.3.4.test.z.stalkr.net >/dev/null
• request that name, it will have the desired IP e.g. dig +short test.z.stalkr.net => 1.2.3.4

Response TTL is 300 (5 minutes). Pick a random name to avoid colliding with others. Use multiple names to pool responses until TTL expires.