DIY DNS firewall

URLhaus is a fantastic free resource that provides many feeds. We’re going to focus on DNS Response Policy Zone (RPZ), also known as DNS firewall, which allows you to block the resolution of certain domain names on your DNS resolver. URLhaus extracts domain names from malware URLs and offers them as an RPZ dataset conveniently formatted to be a BIND DNS zone drop in. This is a high confidence feed because it blocks domains that are actively distributing malware.

Read More
What is a botnet? 2 different ddos compared

A botnet’s greatest weakness is its reliance on domain names. Malware analysis quickly reveals these domain names so that you can work toward seizing or shutting then down and effectively cripple or disable the botnet. Regular readers know we have recently started actively blocking malicious domains via DNS. Many countries do not assist with shutting down these botnets therefore the only fix is blocking the domain.

Read More