Important Notice: Our web hosting provider recently started charging us for additional visits, which was unexpected. In response, we're seeking donations. Depending on the situation, we may explore different monetization options for our Community and Expert Contributors. It's crucial to provide more returns for their expertise and offer more Expert Validated Answers or AI Validated Answers. Learn more about our hosting issue here.

Why aren UDP unicast queries allowed in LLMNR?

allowed llmnr queries UDP unicast
0
Posted

Why aren UDP unicast queries allowed in LLMNR?

0 CommentsAdd a Comment

1 Answer

0

In LLMNR, UDP queries may be sent to the link-scope multicast address, or they may be sent using TCP with TTL=1. When receiving a UDP LLMNR query, the responder checks if it was sent to the link-scope multicast; if not, the query is silently discarded. This ensures that an LLMNR sender cannot receive an LLMNR query from a responder off the local link, preventing an off-link attacker from exploiting any LLMNR security vulnerabilities.

0 CommentsAdd a Comment

Related Questions

What is your question?

*Sadly, we had to bring back ads too. Hopefully more targeted.