Wednesday, July 8, 2009

BlackHole DNS

This is a nice step-by-step paper on how to blackhole DNS queries for malicious domains.

http://www.malwaredomains.com/bhdns.html


These guys are running a DNS Blackhole, and they are providing zone files for download. The full list and updates files are available in different formats to be used easily with BIND, or ISA.

The List now is constantly updated with the current IE 0day malicious domains that are spreading now.

No comments: