search

certtools / intelmq

IntelMQ is a solution for IT security teams for collecting and processing security feeds using a message queuing protocol.
https://docs.intelmq.org/latest/
GNU Affero General Public License v3.0
963 stars 295 forks source link

reverse DNS: Only first record is used #877

Open ghost opened 7 years ago

ghost commented 7 years ago

There can be multiple reverse records for one domain, but we currently use only the first one.

related: #373 #543

ghost commented 4 years ago

Needs an example.

https://github.com/certtools/intelmq/blob/01abd6807423188e8ae64620c03b39b12fd7f30e/intelmq/bots/experts/reverse_dns/expert.py#L71-L80