[IncRnd]

This looks like it was a fun project!

For anyone who wants to research the subject, the class of security vulnerabilities are called DNS tunneling.

[luismedel]

Yes. I recently wrote a Lua-scriptable DNS server called redns[1] (which seems to be a pretty popular name for hobbyist DNS servers, BTW) only to test some of those attacks.

[1] https://github.com/luismedel/redns

[IncRnd]

Nice!

Whenever I see regexs hanging off the Internet, my heart skips a beat! :)

[luismedel]

Thanks!

To be fair, I hope nobody, never, ever use my server in a production environment :-)

[IncRnd]

It looks pretty useful to me (for tests).

But, with software..... Build it and they will use it! :)