u/feldrim

I wrote a short update on two Technitium DNS Server apps I maintain.

The MISP Connector App and Log Exporter App are no longer continuing in the main Technitium DNS Server repository. My versions now live separately under DeltaZulu OÜ, following feedback from Shreyas Zare:

MISP Connector App https://github.com/DeltaZulu-OU/MispConnectorApp

Log Exporter App https://github.com/DeltaZulu-OU/LogExporterApp

This is not only a change of location. Both versions have moved on quite a bit.

The MISP Connector still does the same basic job: it pulls domain indicators from MISP and uses them for resolver-side blocking. The standalone version fixes the blocking-report issue, adds configurable TTLs, and keeps support for NXDOMAIN, TXT reports, and EDE metadata.

The Log Exporter changed more. It is now closer to a DNS log forwarder than the original simple exporter. It has a bounded async pipeline, enrichment, console/file/HTTP/Syslog outputs, NDJSON over HTTP, static tags, dropped-record reporting, and cleaner shutdown behavior.

The reason for separating them is ordinary open-source maintenance. The upstream maintainer should not have to support every app I want to extend, and a larger rewrite is not always suitable for an installed user base.

The older articles still explain the original use cases around MISP, DNS blocking, and SIEM export. The new post is mainly about where the apps live now and what changed.

Article:

https://zaferbalkan.com/technitium-apps/

I have been working on DZMAC, an open-source Windows MAC address changer. I started it in 2024, then quit as I had no time for it. Recently, the LLM tools helped me to finalize it.

Repository: https://github.com/DeltaZulu-OU/dzmac

It started as a practical reimplementation of the core Technitium MAC Address Changer workflow, but it is not a clone and not a reverse-engineering project. I am deliberately keeping the scope narrower: change, restore, and randomize MAC addresses; handle basic IPv4/DHCPv4 operations; support ".tpf" presets where it makes sense; and make failures easier to understand.

Some features are intentionally out of scope for now: DHCPv6, proxy management, tray mode, tray animation, and auto-update logic. I would rather keep the tool predictable than rebuild every historical feature.

This is still alpha. MAC changing on Windows depends heavily on hardware, drivers, registry behavior, WMI, and adapter metadata, so I am especially interested in real-world failure cases.

I would appreciate feedback from people who still use TMAC, manage Windows endpoints, or test network behavior across Ethernet, Wi-Fi, VPN, and virtual adapters.

GPLv3 licensed. Treat it as something to test, not something to deploy blindly.

P.S: DeltaZulu is my personal company, and currently it's nothing but branding for me to share on that repository.

MISP Connector and Log Exporter Apps for Technitium DNS Server Have Moved