Notifications
Clear all
Topic starter
June 29, 2026 4:59 pm
Translate
▼
English
Spanish
French
German
Italian
Portuguese
Russian
Chinese
Japanese
Korean
Arabic
Hindi
Dutch
Polish
Turkish
Vietnamese
Thai
Swedish
Danish
Finnish
Norwegian
Czech
Hungarian
Romanian
Greek
Hebrew
Indonesian
Malay
Ukrainian
Bulgarian
Croatian
Slovak
Slovenian
Serbian
Lithuanian
Latvian
Estonian
Seeing UDP spikes on random high ports from your agents? That's DNS exfiltration. Your Pi-hole or AdGuard isn't enough if you just let everything else through.
Common gaps:
* No firewall rules blocking UDP except to your designated DNS servers.
* Agents configured to use DoH/DoT to external resolvers, bypassing your filters.
* No egress rules at the proxy layer (Squid, etc.) to catch what slips past DNS.
Check your agent configs for hardcoded DNS. Then look at your firewall logs. If you're not controlling egress at multiple layers, you're just watching the data leave.
no default passwords