Security Incidents mailing list archives

Re: DNS cache poisoning?


From: David Glosser <david_glosser () yahoo com>
Date: Fri, 19 Aug 2005 19:27:08 -0400

Please check out the "BlackHole DNS Malware List" at www.bleedingsnort.com.
It contains domains associated with spyware, malware and phishing domains (does not include ad networks) based on domains referenced at symantec, pestpatrol, webhelper4u, etc.

---snip--

6. Blackhole offending networks via named.conf. (Be careful not to get "tricked" into adding innocent networks) 7. Use DNS to reduce banner-ads and/or worm traffic in your network if desired. (establish master zones and point them to loopback) http://www.deer-run.com/~hal/sysadmin/dns-
advert.html


Current thread: