DNS.Pointer.Loop

Description

This signature indicates a DNS protocol anomaly. It indicates detection of a Domain Name Service (DNS) message with pointers that form a loop
DNS is a system that translates between human-readable host or domain names (e.g. www.fortinet.com) and machine-understandable Internet Protocol addresses. A DNS name can be specified with pointers which can point to anywhere within the DNS message. If the chain of pointers form a loop, the message is considered to be malformed.

Affected Products

Any unprotected DNS server may be vulnerable.

Impact

This is an anomaly, which may indicate potential attack attempts.

Recommended Actions

This indicates detection of traffic that does not comply with the protocol standard.
Monitor the traffic from that network for any suspicious activity.

References