search

dmachard / go-dnscollector

Ingesting, pipelining, and enhancing your DNS logs with usage indicators, security analysis, and additional metadata.
MIT License
220 stars 48 forks source link

Implement new domain tracking #628

Open dmachard opened 9 months ago

dmachard commented 9 months ago

Is your feature request related to a problem? Please describe.

Implement new domain tracking like https://doc.powerdns.com/recursor/settings.html#new-domain-log

https://doc.powerdns.com/recursor/nod_udr.html#newly-observed-domain

Jon1760 commented 9 months ago

I'm not the original requestor but this caught my eye.

While I currently obtain the data in a different way (post-processing of DNS query logs), particularly as my use case does not require real-time actions, and I outsource some aspects of the problem to a third party DNS security filtering service, generally this is useful for building up white or black lists of domains that are allowed or blocked at the perimeter and/or doing security analysis on "new" domains that are used.

I'd consider using the feature if it existed.

dmachard commented 1 day ago

implementation in progress