VirtualTam's bookmarks

1. CoreDNS - header plugin 2025-01-12

   tags: network/dns, network/http

   [ permalink ]

   • #3690 - CoreDNS as dns server, when doing "nslookup domain" command, I Got ";; Got recursion not available from xx.xx.xx.xx, trying next server"
   • #3835 - [investigation] Got recursion not available from ... trying next server
2. macos - DNS Resolution Fails for ping and curl, but not dig 2025-01-11

   tags: apple/macos, network/dns, network/http

   [ permalink ]

   • OSX Domain-Specific DNS Servers (/etc/resolver)
   • [macOS] need to support domain specific dns server (custom DNS)
   • Using scutil to set DNS for specific domains
   • How to query macOS DNS resolver from Terminal?
3. DNS over HTTPS 2024-11-25

   tags: cryptography/encryption, ietf/rfc, internet/browser/chrome, internet/browser/firefox, network/dns, network/http, network/transport-layer-security

   [ permalink ]

   RFCs:

   • RFC 7858 - Specification for DNS over Transport Layer Security (TLS)
   • RFC 8484 - DNS Queries over HTTPS (DoH)

   Resources:

   • Carsten Strotmann - doh.defaultroutes.de DNS-over-TLS/HTTPS Server
   • DNS over HTTPS - Cloudflare 1.1.1.1 Documentation

   Setting up a DNS-over-HTTPS server:

   • DNS over HTTPS - ArchWiki
   • DNS-over-TLS almost working - Træfik Forum
   • Using Google’s dns.google.com with CoreDNS

   Browser configuration:

   • Configure DoH on your browser - Cloudflare Documentation
   • Using custom DNS-over-HTTPS with CoreDNS and Google Chrome
   • Firefox DNS-over-HTTPS - Firefox Help
4. SSHFP - Secure SHell FingerPrint DNS Records 2024-10-27

   tags: cryptography/elliptic-curve, network/dns, network/dnssec, network/ssh

   [ permalink ]

   • IANA - DNS SSHFP Resource Record Parameters
   • ssh - How do I generate SSHFP records?
   • Oh SSH-it, What’s My Fingerprint? A Large-Scale Analysis of SSH Host Key Fingerprint Verification Records in the DNS
     • gehaxelt/sshfp-dns-measurement
     • APNIC - Improving SSH’s security with SSHFP DNS records

   RFCs:

   • RFC 4251 - The Secure Shell (SSH) Protocol Architecture
   • RFC 4255 - Using DNS to Securely Publish Secure Shell (SSH) Key Fingerprints
5. Building a Kubernetes Home Lab on the Raspberry Pi 2024-05-28

   tags: cryptography/certificate-authority, distributed-system, linux/container, linux/container/kubernetes, network/dns, raspberry-pi, self-hosting

   [ permalink ]

   1. Architecture & Roadmap
   2. Setup Kubernetes Management Node and Private Certificate Authority
   3. Configuring a Multi-Architecture Build Process
   4. Local DNS Services
6. CoreDNS - DNS and Service Discovery 2024-05-28

   tags: network/dns, network/dnssec, programming/go

   [ permalink ]

   • coredns/coredns
   • Quick Start
   • Plugins
     • dnssec
     • file - Serve zone data from an RFC 1035-style file
   • Running CoreDNS as a DNS Server in a Container
7. A Deep Dive into Email Deliverability in 2024 2024-04-01

   tags: email, email/dkim, email/dmarc, email/spf, google/mail, network/dns

   [ permalink ]
8. (A few) Ops Lessons We All Learn The Hard Way 2023-02-18

   tags: cloud-computing, network/dns, programming/shell, sysadmin

   [ permalink ]

   28. Blocking TCP port 53 traffic leads to very strange failures. Don't.
   29. The source you're looking at is not the code running in production.
   30. "Prod" is just another name for "staging".

9. Postfix, iPhone, Apple Mail and the reject_unknown_helo_hostname parameter 2023-01-28

   tags: email/postfix, mobile/ios, network/dns

   [ permalink ]

   I'd get a better behaved mail client. — Hu on Gentoo Forums

   • http://www.postfix.org/postconf.5.html#reject_invalid_helo_hostname
   • https://serverfault.com/questions/575539/postfix-helo-command-rejected-host-not-found
   • https://serverfault.com/questions/527541/postfix-whitelist-host-for-specific-sender
   • https://serverfault.com/questions/922935/why-does-postfix-say-helo-command-rejected-host-not-found-when-dig-finds-the
   • https://discussions.apple.com/thread/3120175
   • https://forums.gentoo.org/viewtopic-p-8604630.html?sid=a666f84af3d663d43b4c72a5b82115c4
10. cli53 - Command line tool for Amazon Route 53 2021-04-09

    tags: cloud-computing/aws, command-line, network/dns

    [ permalink ]
11. Enhanced SSL Load Balancing with Server Name Indication (SNI) TLS Extension - HAProxy Technologies 2020-12-11

    tags: network/dns, network/http-server/haproxy, network/reverse-proxy, network/server-name-indication, network/tcp, network/transport-layer-security

    [ permalink ]

    • https://discourse.haproxy.org/t/req-ssl-sni-and-ssl-termination/2139/3
    • com/@olivier.ragain/haproxy-https-load-balancing-on-sni-207c17398d19
12. Make Your Own Travel Router With A NanoPi And Armbian – /var/log/tmaurice 2020-09-28

    tags: linux, network, network/dns, network/router, network/vpn/wireguard, network/wireless/wifi, raspberry-pi, unbound

    [ permalink ]
13. Spotify's Love/Hate Relationship with DNS 2020-01-03

    tags: bind9, network, network/dns, spotify, unbound

    [ permalink ]

    prev. https://labs.spotify.com/2017/03/31/spotifys-lovehate-relationship-with-dns/

14. Dnstop: Stay on Top of Your DNS Traffic 2019-12-21

    tags: network, network/dns, observability

    [ permalink ]

    • https://github.com/measurement-factory/dnstop
15. Own mail server based on Dovecot, Postfix, MySQL, Rspamd and Debian 9 Stretch 2019-10-21

    tags: email, email/dovecot, email/postfix, email/rspamd, email/spam, linux, linux/debian, network/dns, self-hosting

    [ permalink ]
16. DNS Privacy Daemon - Stubby - DNS Privacy Project - Global Site 2019-10-04

    tags: linux, network, network/dns

    [ permalink ]

    • https://github.com/getdnsapi/stubby
    • https://getdnsapi.net/
17. 10 years of self-hosting Linuxwall.info - Quelques digressions sous GPL 2019-06-18

    tags: email, email/dkim, email/spam, linux, network, network/dns, self-hosting, sysadmin

    [ permalink ]

    • http://wiki.linuxwall.info/doku.php/en:ressources:dossiers:postfix:dkimproxy
    • http://wiki.linuxwall.info/doku.php/en:ressources:dossiers:dspam
    • http://wiki.linuxwall.info/doku.php/fr:ressources:dossiers:postfix:postscreen
18. Pi-hole: A black hole for Internet advertisements 2019-05-22

    tags: linux/container/docker, network, network/dhcp, network/dns, privacy, raspberry-pi

    [ permalink ]

    • https://github.com/pi-hole
    • https://github.com/jpmck/PADD/
    • https://github.com/eko/pihole-exporter
19. Blaeu, creating measurements on RIPE Atlas probes 2019-04-15

    tags: internet, internet-service-provider, network, network/dns, network/ip, sysadmin

    [ permalink ]

    • https://atlas.ripe.net/
    • https://www.ripe.net/manage-ips-and-asns/resource-management/faq/independent-resources/phase-three/what-is-a-local-internet-registry-lir
    • https://labs.ripe.net/Members/stephane_bortzmeyer/using-ripe-atlas-to-debug-network-connectivity-problems
    • https://github.com/RIPE-Atlas-Community/ripe-atlas-community-contrib
    • https://www.bortzmeyer.org/dns-over-tls-atlas-measures.html
20. Cross-Origin Resource Sharing (CORS) | MDN 2019-01-23

    tags: domain, network/dns, network/http, security, server

    [ permalink ]

    • https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Access-Control-Allow-Credentials
    • https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Access-Control-Allow-Headers
    • https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Access-Control-Allow-Methods
    • https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Access-Control-Allow-Origin