{"id":8888,"date":"2023-09-12T16:31:57","date_gmt":"2023-09-12T23:31:57","guid":{"rendered":"https:\/\/blogs.infoblox.com\/?p=8888"},"modified":"2023-11-03T08:24:06","modified_gmt":"2023-11-03T15:24:06","slug":"on-the-wisdom-of-blocking-certain-mx-records","status":"publish","type":"post","link":"https:\/\/www.infoblox.com\/blog\/security\/on-the-wisdom-of-blocking-certain-mx-records\/","title":{"rendered":"On the Wisdom of Blocking (Certain) MX Records"},"content":{"rendered":"<p>It came to my attention recently that there are some cloud-based recursive DNS services that don\u2019t permit you to block MX records. Of course, I don\u2019t mean \u201cblock the resolution of all MX records,\u201d since resolving MX records is a requirement for sending mail over the Internet. But they don\u2019t allow you to create policies to block specific MX records. That seems silly\u2014and potentially dangerous\u2014to me, given the possibility of MX-record abuse by the bad guys<\/p>\n<p>Let\u2019s start with the MX record\u2019s primary function: Determining where to send email that\u2019s addressed to a particular domain name. MX records provide a level of indirection, allowing an administrator to specify one or more mail exchangers for a particular domain name. In the modern Internet era, that\u2019s critical, because so many organizations use big email providers such as Gmail and Outlook.com. These organizations can preserve their identity\u2014for example, <a>user@infoblox.com<\/a> addresses\u2013while one of these providers manages their email servers. That might look like:<\/p>\n<p><img decoding=\"async\" src=\"\/wp-content\/uploads\/infoblox-blog-mx-records-v3.png\" \/><\/p>\n<p>Which redirects email addressed to <a>users@nxdomain.com<\/a> to Google\u2019s mail servers.<\/p>\n<p>But what about the bad guys, people who send spam or, worse, mount phishing campaigns? In those cases, you may well want to prevent the resolution of the domain names that own the MX records, not the shared email infrastructure they use.<sup>1<\/sup> This selective blocking would prevent users from inadvertently replying to spam or phishing email, or clicking on mailto: URLs in the messages that point to those domain names. But preventing the resolution of the names of the mail exchangers might be \u201ctarring them with the same brush,\u201d and could cause collateral damage by keeping you from sending mail to legitimate domain names that use the same infrastructure. Imagine a larger set of MX records that look like this:<\/p>\n<p><img decoding=\"async\" src=\"\/wp-content\/uploads\/infoblox-blog-mx-records-two-v3.png\" \/><\/p>\n<p>In this example, <a>nxdomain.com<\/a> (which is my personal domain) and <a>spammer.com<\/a> (which apparently is for sale!) share the same set of mail exchangers, so blocking the resolution of <a>spammer.com<\/a>\u2019s mail exchangers (in this case, <a>aspmx.l.google.com<\/a> and friends) also prevents people from sending mail to <a>nxdomain.com<\/a> addresses. Not cool!  (For the record, with Infoblox\u2019s BloxOne Threat Defense or with RPZs plumbed into our appliances, blocking <a>spammer.com<\/a> blocks MX records along with all other record types.)<\/p>\n<p>\u201cBut wait,\u201d some of you may be thinking. \u201cI have an email gateway or service that protects me from spam!\u201d Perhaps even more disconcerting than spam is the threat of using MX records to tunnel data. While other record types such as TXT records can carry larger payloads, MX records can carry plenty (a 256-character domain name plus a 16-bit preference) and, as we\u2019ve heard, have the benefit that some people think they\u2019re innocuous. Bad actors who know that some services lack the ability to block MX records might choose to use them just for that reason.<\/p>\n<p>Similarly, MX records could be used in a Domain Generation Algorithm (DGAs) to enable malware to rendezvous with a command and control server. From the threat actor\u2019s perspective, one advantage is that most DGAs use A or AAAA queries, so a DGA\u2019s use of MX records would be unexpected.<\/p>\n<p>Given all these considerations, when asking whether a recursive DNS service should be able to selectively block MX records, my response is, \u201cWhy not?\u201d<\/p>\n<h3 style=\"font-size:18px;\">Endnotes<\/h3>\n<ol style=\"font-size:14px;\">\n<li>To be sure, many spam and phish senders use their own, dedicated email infrastructure, but not all do.<\/li>\n<\/ol>\n","protected":false},"excerpt":{"rendered":"<p>It came to my attention recently that there are some cloud-based recursive DNS services that don\u2019t permit you to block MX records. Of course, I don\u2019t mean \u201cblock the resolution of all MX records,\u201d since resolving MX records is a requirement for sending mail over the Internet. But they don\u2019t allow you to create policies [&hellip;]<\/p>\n","protected":false},"author":178,"featured_media":8326,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"inline_featured_image":false,"_genesis_hide_title":false,"_genesis_hide_breadcrumbs":false,"_genesis_hide_singular_image":false,"_genesis_hide_footer_widgets":false,"_genesis_custom_body_class":"","_genesis_custom_post_class":"","_genesis_layout":"","footnotes":""},"categories":[2],"tags":[228,909,307,863,247],"class_list":{"0":"post-8888","1":"post","2":"type-post","3":"status-publish","4":"format-standard","5":"has-post-thumbnail","7":"category-security","8":"tag-bloxone-threat-defense","9":"tag-mx-records","10":"tag-phishing","11":"tag-command-and-control","12":"tag-dns-tunneling","13":"entry"},"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v27.3 (Yoast SEO v27.3) - https:\/\/yoast.com\/product\/yoast-seo-premium-wordpress\/ -->\n<title>On the Wisdom of Blocking (Certain) MX Records | Infoblox<\/title>\n<meta name=\"description\" content=\"Cricket Liu makes the case for why cloud-based recursive DNS services should allow selective blocking of MX records to prevent users from connecting to malicious domains.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.infoblox.com\/blog\/security\/on-the-wisdom-of-blocking-certain-mx-records\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"On the Wisdom of Blocking (Certain) MX Records | Infoblox\" \/>\n<meta property=\"og:description\" content=\"Cricket Liu makes the case for why cloud-based recursive DNS services should allow selective blocking of MX records to prevent users from connecting to malicious domains.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.infoblox.com\/blog\/security\/on-the-wisdom-of-blocking-certain-mx-records\/\" \/>\n<meta property=\"og:site_name\" content=\"Infoblox Blog\" \/>\n<meta property=\"article:published_time\" content=\"2023-09-12T23:31:57+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2023-11-03T15:24:06+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.infoblox.com\/blog\/wp-content\/uploads\/ipv6-image-03.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"612\" \/>\n\t<meta property=\"og:image:height\" content=\"408\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Cricket Liu\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:title\" content=\"On the Wisdom of Blocking (Certain) MX Records | Infoblox\" \/>\n<meta name=\"twitter:description\" content=\"Cricket Liu makes the case for why cloud-based recursive DNS services should allow selective blocking of MX records to prevent users from connecting to malicious domains.\" \/>\n<meta name=\"twitter:image\" content=\"https:\/\/www.infoblox.com\/blog\/wp-content\/uploads\/ipv6-image-03.jpg\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Cricket Liu\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"3 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/www.infoblox.com\\\/blog\\\/security\\\/on-the-wisdom-of-blocking-certain-mx-records\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.infoblox.com\\\/blog\\\/security\\\/on-the-wisdom-of-blocking-certain-mx-records\\\/\"},\"author\":{\"name\":\"Cricket Liu\",\"@id\":\"https:\\\/\\\/www.infoblox.com\\\/blog\\\/#\\\/schema\\\/person\\\/bb6b62b1b99a7cbcd7c528d5763778d5\"},\"headline\":\"On the Wisdom of Blocking (Certain) MX Records\",\"datePublished\":\"2023-09-12T23:31:57+00:00\",\"dateModified\":\"2023-11-03T15:24:06+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/www.infoblox.com\\\/blog\\\/security\\\/on-the-wisdom-of-blocking-certain-mx-records\\\/\"},\"wordCount\":591,\"publisher\":{\"@id\":\"https:\\\/\\\/www.infoblox.com\\\/blog\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/www.infoblox.com\\\/blog\\\/security\\\/on-the-wisdom-of-blocking-certain-mx-records\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.infoblox.com\\\/blog\\\/wp-content\\\/uploads\\\/ipv6-image-03.jpg\",\"keywords\":[\"BloxOne\u00ae Threat Defense\",\"MX records\",\"Phishing\",\"command and control\",\"DNS Tunneling\"],\"articleSection\":[\"Security\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.infoblox.com\\\/blog\\\/security\\\/on-the-wisdom-of-blocking-certain-mx-records\\\/\",\"url\":\"https:\\\/\\\/www.infoblox.com\\\/blog\\\/security\\\/on-the-wisdom-of-blocking-certain-mx-records\\\/\",\"name\":\"On the Wisdom of Blocking (Certain) MX Records | Infoblox\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.infoblox.com\\\/blog\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/www.infoblox.com\\\/blog\\\/security\\\/on-the-wisdom-of-blocking-certain-mx-records\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/www.infoblox.com\\\/blog\\\/security\\\/on-the-wisdom-of-blocking-certain-mx-records\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.infoblox.com\\\/blog\\\/wp-content\\\/uploads\\\/ipv6-image-03.jpg\",\"datePublished\":\"2023-09-12T23:31:57+00:00\",\"dateModified\":\"2023-11-03T15:24:06+00:00\",\"description\":\"Cricket Liu makes the case for why cloud-based recursive DNS services should allow selective blocking of MX records to prevent users from connecting to malicious domains.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.infoblox.com\\\/blog\\\/security\\\/on-the-wisdom-of-blocking-certain-mx-records\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.infoblox.com\\\/blog\\\/security\\\/on-the-wisdom-of-blocking-certain-mx-records\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.infoblox.com\\\/blog\\\/security\\\/on-the-wisdom-of-blocking-certain-mx-records\\\/#primaryimage\",\"url\":\"https:\\\/\\\/www.infoblox.com\\\/blog\\\/wp-content\\\/uploads\\\/ipv6-image-03.jpg\",\"contentUrl\":\"https:\\\/\\\/www.infoblox.com\\\/blog\\\/wp-content\\\/uploads\\\/ipv6-image-03.jpg\",\"width\":612,\"height\":408},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.infoblox.com\\\/blog\\\/security\\\/on-the-wisdom-of-blocking-certain-mx-records\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/www.infoblox.com\\\/blog\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Security\",\"item\":\"https:\\\/\\\/www.infoblox.com\\\/blog\\\/category\\\/security\\\/\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"On the Wisdom of Blocking (Certain) MX Records\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.infoblox.com\\\/blog\\\/#website\",\"url\":\"https:\\\/\\\/www.infoblox.com\\\/blog\\\/\",\"name\":\"infoblox.com\\\/blog\\\/\",\"description\":\"\",\"publisher\":{\"@id\":\"https:\\\/\\\/www.infoblox.com\\\/blog\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.infoblox.com\\\/blog\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/www.infoblox.com\\\/blog\\\/#organization\",\"name\":\"Infoblox\",\"url\":\"https:\\\/\\\/www.infoblox.com\\\/blog\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.infoblox.com\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/www.infoblox.com\\\/blog\\\/wp-content\\\/uploads\\\/infoblox-logo-2.svg\",\"contentUrl\":\"https:\\\/\\\/www.infoblox.com\\\/blog\\\/wp-content\\\/uploads\\\/infoblox-logo-2.svg\",\"width\":137,\"height\":30,\"caption\":\"Infoblox\"},\"image\":{\"@id\":\"https:\\\/\\\/www.infoblox.com\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\"}},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/www.infoblox.com\\\/blog\\\/#\\\/schema\\\/person\\\/bb6b62b1b99a7cbcd7c528d5763778d5\",\"name\":\"Cricket Liu\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/blogs.infoblox.com\\\/wp-content\\\/uploads\\\/cricket-new-96x96.jpg\",\"url\":\"https:\\\/\\\/blogs.infoblox.com\\\/wp-content\\\/uploads\\\/cricket-new-96x96.jpg\",\"contentUrl\":\"https:\\\/\\\/blogs.infoblox.com\\\/wp-content\\\/uploads\\\/cricket-new-96x96.jpg\",\"caption\":\"Cricket Liu\"},\"description\":\"Cricket is one of the world\u2019s leading experts on the Domain Name System (DNS) and serves as the liaison between Infoblox and the DNS community. Before joining Infoblox, he founded an internet consulting and training company, Acme Byte &amp; Wire, after running the hp.com domain at Hewlett-Packard. Cricket is a prolific speaker and author, having written a number of books including \u201cDNS and BIND,\u201d one of the most widely used references in the field, now in its fifth edition.\",\"url\":\"https:\\\/\\\/www.infoblox.com\\\/blog\\\/author\\\/cricket-liu\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"On the Wisdom of Blocking (Certain) MX Records | Infoblox","description":"Cricket Liu makes the case for why cloud-based recursive DNS services should allow selective blocking of MX records to prevent users from connecting to malicious domains.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.infoblox.com\/blog\/security\/on-the-wisdom-of-blocking-certain-mx-records\/","og_locale":"en_US","og_type":"article","og_title":"On the Wisdom of Blocking (Certain) MX Records | Infoblox","og_description":"Cricket Liu makes the case for why cloud-based recursive DNS services should allow selective blocking of MX records to prevent users from connecting to malicious domains.","og_url":"https:\/\/www.infoblox.com\/blog\/security\/on-the-wisdom-of-blocking-certain-mx-records\/","og_site_name":"Infoblox Blog","article_published_time":"2023-09-12T23:31:57+00:00","article_modified_time":"2023-11-03T15:24:06+00:00","og_image":[{"width":612,"height":408,"url":"https:\/\/www.infoblox.com\/blog\/wp-content\/uploads\/ipv6-image-03.jpg","type":"image\/jpeg"}],"author":"Cricket Liu","twitter_card":"summary_large_image","twitter_title":"On the Wisdom of Blocking (Certain) MX Records | Infoblox","twitter_description":"Cricket Liu makes the case for why cloud-based recursive DNS services should allow selective blocking of MX records to prevent users from connecting to malicious domains.","twitter_image":"https:\/\/www.infoblox.com\/blog\/wp-content\/uploads\/ipv6-image-03.jpg","twitter_misc":{"Written by":"Cricket Liu","Est. reading time":"3 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.infoblox.com\/blog\/security\/on-the-wisdom-of-blocking-certain-mx-records\/#article","isPartOf":{"@id":"https:\/\/www.infoblox.com\/blog\/security\/on-the-wisdom-of-blocking-certain-mx-records\/"},"author":{"name":"Cricket Liu","@id":"https:\/\/www.infoblox.com\/blog\/#\/schema\/person\/bb6b62b1b99a7cbcd7c528d5763778d5"},"headline":"On the Wisdom of Blocking (Certain) MX Records","datePublished":"2023-09-12T23:31:57+00:00","dateModified":"2023-11-03T15:24:06+00:00","mainEntityOfPage":{"@id":"https:\/\/www.infoblox.com\/blog\/security\/on-the-wisdom-of-blocking-certain-mx-records\/"},"wordCount":591,"publisher":{"@id":"https:\/\/www.infoblox.com\/blog\/#organization"},"image":{"@id":"https:\/\/www.infoblox.com\/blog\/security\/on-the-wisdom-of-blocking-certain-mx-records\/#primaryimage"},"thumbnailUrl":"https:\/\/www.infoblox.com\/blog\/wp-content\/uploads\/ipv6-image-03.jpg","keywords":["BloxOne\u00ae Threat Defense","MX records","Phishing","command and control","DNS Tunneling"],"articleSection":["Security"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/www.infoblox.com\/blog\/security\/on-the-wisdom-of-blocking-certain-mx-records\/","url":"https:\/\/www.infoblox.com\/blog\/security\/on-the-wisdom-of-blocking-certain-mx-records\/","name":"On the Wisdom of Blocking (Certain) MX Records | Infoblox","isPartOf":{"@id":"https:\/\/www.infoblox.com\/blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.infoblox.com\/blog\/security\/on-the-wisdom-of-blocking-certain-mx-records\/#primaryimage"},"image":{"@id":"https:\/\/www.infoblox.com\/blog\/security\/on-the-wisdom-of-blocking-certain-mx-records\/#primaryimage"},"thumbnailUrl":"https:\/\/www.infoblox.com\/blog\/wp-content\/uploads\/ipv6-image-03.jpg","datePublished":"2023-09-12T23:31:57+00:00","dateModified":"2023-11-03T15:24:06+00:00","description":"Cricket Liu makes the case for why cloud-based recursive DNS services should allow selective blocking of MX records to prevent users from connecting to malicious domains.","breadcrumb":{"@id":"https:\/\/www.infoblox.com\/blog\/security\/on-the-wisdom-of-blocking-certain-mx-records\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.infoblox.com\/blog\/security\/on-the-wisdom-of-blocking-certain-mx-records\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.infoblox.com\/blog\/security\/on-the-wisdom-of-blocking-certain-mx-records\/#primaryimage","url":"https:\/\/www.infoblox.com\/blog\/wp-content\/uploads\/ipv6-image-03.jpg","contentUrl":"https:\/\/www.infoblox.com\/blog\/wp-content\/uploads\/ipv6-image-03.jpg","width":612,"height":408},{"@type":"BreadcrumbList","@id":"https:\/\/www.infoblox.com\/blog\/security\/on-the-wisdom-of-blocking-certain-mx-records\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.infoblox.com\/blog\/"},{"@type":"ListItem","position":2,"name":"Security","item":"https:\/\/www.infoblox.com\/blog\/category\/security\/"},{"@type":"ListItem","position":3,"name":"On the Wisdom of Blocking (Certain) MX Records"}]},{"@type":"WebSite","@id":"https:\/\/www.infoblox.com\/blog\/#website","url":"https:\/\/www.infoblox.com\/blog\/","name":"infoblox.com\/blog\/","description":"","publisher":{"@id":"https:\/\/www.infoblox.com\/blog\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.infoblox.com\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/www.infoblox.com\/blog\/#organization","name":"Infoblox","url":"https:\/\/www.infoblox.com\/blog\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.infoblox.com\/blog\/#\/schema\/logo\/image\/","url":"https:\/\/www.infoblox.com\/blog\/wp-content\/uploads\/infoblox-logo-2.svg","contentUrl":"https:\/\/www.infoblox.com\/blog\/wp-content\/uploads\/infoblox-logo-2.svg","width":137,"height":30,"caption":"Infoblox"},"image":{"@id":"https:\/\/www.infoblox.com\/blog\/#\/schema\/logo\/image\/"}},{"@type":"Person","@id":"https:\/\/www.infoblox.com\/blog\/#\/schema\/person\/bb6b62b1b99a7cbcd7c528d5763778d5","name":"Cricket Liu","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/blogs.infoblox.com\/wp-content\/uploads\/cricket-new-96x96.jpg","url":"https:\/\/blogs.infoblox.com\/wp-content\/uploads\/cricket-new-96x96.jpg","contentUrl":"https:\/\/blogs.infoblox.com\/wp-content\/uploads\/cricket-new-96x96.jpg","caption":"Cricket Liu"},"description":"Cricket is one of the world\u2019s leading experts on the Domain Name System (DNS) and serves as the liaison between Infoblox and the DNS community. Before joining Infoblox, he founded an internet consulting and training company, Acme Byte &amp; Wire, after running the hp.com domain at Hewlett-Packard. Cricket is a prolific speaker and author, having written a number of books including \u201cDNS and BIND,\u201d one of the most widely used references in the field, now in its fifth edition.","url":"https:\/\/www.infoblox.com\/blog\/author\/cricket-liu\/"}]}},"_links":{"self":[{"href":"https:\/\/www.infoblox.com\/blog\/wp-json\/wp\/v2\/posts\/8888","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.infoblox.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.infoblox.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.infoblox.com\/blog\/wp-json\/wp\/v2\/users\/178"}],"replies":[{"embeddable":true,"href":"https:\/\/www.infoblox.com\/blog\/wp-json\/wp\/v2\/comments?post=8888"}],"version-history":[{"count":10,"href":"https:\/\/www.infoblox.com\/blog\/wp-json\/wp\/v2\/posts\/8888\/revisions"}],"predecessor-version":[{"id":9174,"href":"https:\/\/www.infoblox.com\/blog\/wp-json\/wp\/v2\/posts\/8888\/revisions\/9174"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.infoblox.com\/blog\/wp-json\/wp\/v2\/media\/8326"}],"wp:attachment":[{"href":"https:\/\/www.infoblox.com\/blog\/wp-json\/wp\/v2\/media?parent=8888"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.infoblox.com\/blog\/wp-json\/wp\/v2\/categories?post=8888"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.infoblox.com\/blog\/wp-json\/wp\/v2\/tags?post=8888"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}