{"id":5513,"date":"2023-09-30T09:29:26","date_gmt":"2023-09-30T14:29:26","guid":{"rendered":"https:\/\/www.incredigeek.com\/home\/?p=5513"},"modified":"2023-10-02T14:05:27","modified_gmt":"2023-10-02T19:05:27","slug":"dns-query-sl-0-0-0-0-in-mikrotik-dns-cache","status":"publish","type":"post","link":"https:\/\/www.incredigeek.com\/home\/dns-query-sl-0-0-0-0-in-mikrotik-dns-cache\/","title":{"rendered":"DNS Query &#8220;sl 0.0.0.0&#8221;  in Mikrotik DNS Cache"},"content":{"rendered":"\n<p><\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><a href=\"https:\/\/www.incredigeek.com\/home\/wp-content\/uploads\/2023\/09\/image.png\"><img loading=\"lazy\" decoding=\"async\" width=\"313\" height=\"154\" src=\"https:\/\/www.incredigeek.com\/home\/wp-content\/uploads\/2023\/09\/image.png\" alt=\"\" class=\"wp-image-5514\" srcset=\"https:\/\/www.incredigeek.com\/home\/wp-content\/uploads\/2023\/09\/image.png 313w, https:\/\/www.incredigeek.com\/home\/wp-content\/uploads\/2023\/09\/image-300x148.png 300w\" sizes=\"auto, (max-width: 313px) 100vw, 313px\" \/><\/a><\/figure>\n\n\n\n<p>Sounds like this could be from a potential scan.  The record is useless as 0.0.0.0 doesn&#8217;t go to anything.<\/p>\n\n\n\n<p><a href=\"https:\/\/learn.microsoft.com\/en-us\/answers\/questions\/547092\/what-is-the-sl(0)-in-dns-logs-as-host-name\">https:\/\/learn.microsoft.com\/en-us\/answers\/questions\/547092\/what-is-the-sl(0)-in-dns-logs-as-host-name<\/a><\/p>\n\n\n\n<p>We can block this type of behavior by blocking inbound DNS request.  Change in-interface to your interface or change to an interface list.<\/p>\n\n\n\n<pre class=\"wp-block-preformatted\">ip firewall filter add chain=input protocol=6 dst-port=53 in-interface=ether1 action=drop\nip firewall filter add chain=input protocol=17 dst-port=53 in-interface=ether1 action=drop<\/pre>\n\n\n\n<figure class=\"wp-block-embed is-type-wp-embed is-provider-incredigeek wp-block-embed-incredigeek\"><div class=\"wp-block-embed__wrapper\">\n<blockquote class=\"wp-embedded-content\" data-secret=\"05NqMDzFhY\"><a href=\"https:\/\/www.incredigeek.com\/home\/troubleshooting-dns-cpu-usage-on-mikrotik-router\/\">Troubleshooting DNS CPU Usage on Mikrotik Router<\/a><\/blockquote><iframe loading=\"lazy\" class=\"wp-embedded-content\" sandbox=\"allow-scripts\" security=\"restricted\" style=\"position: absolute; clip: rect(1px, 1px, 1px, 1px);\" title=\"&#8220;Troubleshooting DNS CPU Usage on Mikrotik Router&#8221; &#8212; Incredigeek\" src=\"https:\/\/www.incredigeek.com\/home\/troubleshooting-dns-cpu-usage-on-mikrotik-router\/embed\/#?secret=f7HhC7WGJW#?secret=05NqMDzFhY\" data-secret=\"05NqMDzFhY\" width=\"584\" height=\"329\" frameborder=\"0\" marginwidth=\"0\" marginheight=\"0\" scrolling=\"no\"><\/iframe>\n<\/div><\/figure>\n","protected":false},"excerpt":{"rendered":"<p>Sounds like this could be from a potential scan. The record is useless as 0.0.0.0 doesn&#8217;t go to anything. https:\/\/learn.microsoft.com\/en-us\/answers\/questions\/547092\/what-is-the-sl(0)-in-dns-logs-as-host-name We can block this type of behavior by blocking inbound DNS request. Change in-interface to your interface or change to &hellip; <a href=\"https:\/\/www.incredigeek.com\/home\/dns-query-sl-0-0-0-0-in-mikrotik-dns-cache\/\">Continue reading <span class=\"meta-nav\">&rarr;<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[452],"tags":[277,301,1577,388],"class_list":["post-5513","post","type-post","status-publish","format-standard","hentry","category-mikrotik","tag-dns","tag-mikrotik","tag-query","tag-routeros"],"_links":{"self":[{"href":"https:\/\/www.incredigeek.com\/home\/wp-json\/wp\/v2\/posts\/5513","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.incredigeek.com\/home\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.incredigeek.com\/home\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.incredigeek.com\/home\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.incredigeek.com\/home\/wp-json\/wp\/v2\/comments?post=5513"}],"version-history":[{"count":2,"href":"https:\/\/www.incredigeek.com\/home\/wp-json\/wp\/v2\/posts\/5513\/revisions"}],"predecessor-version":[{"id":5517,"href":"https:\/\/www.incredigeek.com\/home\/wp-json\/wp\/v2\/posts\/5513\/revisions\/5517"}],"wp:attachment":[{"href":"https:\/\/www.incredigeek.com\/home\/wp-json\/wp\/v2\/media?parent=5513"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.incredigeek.com\/home\/wp-json\/wp\/v2\/categories?post=5513"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.incredigeek.com\/home\/wp-json\/wp\/v2\/tags?post=5513"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}