On his name

Using dnstap for triggering action from DNS name resolution.

It should work with any DNS server with dnstap output, tested with Coredns.

Test it

With a setcap, coredns doesn't have to be run as root, but on-his-name uses iptables and needs to be run as root.

Launch coredns in the folder with the Corefile.

Launch the service :

LISTEN=./tap.sock SOCKET_UID=1000 ./bin/on-his-name *.example.com

You can dig :

dig @localhost -p 1053 blog.example.com