LinuxQuestions.org

LinuxQuestions.org (/questions/)
-   Linux - Security (https://www.linuxquestions.org/questions/linux-security-4/)
-   -   Blocking Malicious Domains in DNS (Bind) (https://www.linuxquestions.org/questions/linux-security-4/blocking-malicious-domains-in-dns-bind-4175509564/)

bipinkdas 06-29-2014 04:53 AM

Blocking Malicious Domains in DNS (Bind)
 
Dear All,

Our DNS servers receiving huge requests from malicious domains like hpw2k3isancbc, ghxx.cn,xxtww.cn. These domain doesnt belongs to any name servers, all are orphan domains. How can I block all these malicious domains in DNS server to stop querying to my name servers ?

BIND 9.

Regards.

notsure 06-29-2014 03:35 PM

http://malwarepatrol.net/ provides a block list. I signed up for the service $4/month using the aggressive squid-proxy list for ads, malware and cryptoblocker.

There is a list for BIND, however, you'll have to sign up for a free account to see if it's free.


All times are GMT -5. The time now is 06:06 AM.