Security
What can actually be blocked
Not every threat passes through DNS, and the ones that do do not always arrive the same way. See what each protection covers and where it fails.
- What DNS does — and does not do — against phishingWhy blocking by name only catches part of the traps, and what to look at when the anti-phishing list is not enough.
- DNS tunneling: when data exfiltration looks like a lookupHow an egress channel is built on top of name lookups, why it goes unnoticed, and what reduces the surface.
- Hijacked DNS: when someone else answers for your nameWhat happens when a lookup goes to the wrong server, the signs it shows in practice, and how to check and fix it.