DNS (53)

The DNS module is really a DNS proxy server, allowing you to log DNS requests and forward them to a specific DNS server.

It is useful to create honeypots that mimic DNS server behavior, even on internal networks.

You can configure it to forward DNS queries to either an internal DNS server on your network or an external public DNS server (such as 8.8.8.8 or 1.1.1.1).

Configuration

"dns": [
  {
    "port": 53,
    "target_dns": "127.0.0.1"
  }
]

Options

Option	Type	Description	Default
port	integer	TCP/UDP port number for the DNS service	53
target_dns	string	A real DNS server on your network, to resolve requests	127.0.0.1