Groups > comp.protocols.dns.bind > #15980

Re: scripts-to-block-domains

Path	csiph.com!xmission!news.snarked.org!news.linkpendium.com!news.linkpendium.com!panix!usenet.stanford.edu!not-for-mail
From	Grant Taylor <gtaylor@tnetconsulting.net>
Newsgroups	comp.protocols.dns.bind
Subject	Re: scripts-to-block-domains
Date	Tue, 14 Jul 2020 22:18:04 -0600
Organization	TNet Consulting
Lines	110
Approved	bind-users@lists.isc.org
Message-ID	<mailman.713.1594786666.942.bind-users@lists.isc.org> (permalink)
References	<117301d658e1$0f6966a0$2e3c33e0$@cyberia.net.sa> <7f14c6fc-804e-bca2-96f0-eb4c71d088e1@tnetconsulting.net> <134f01d659a5$3cbf3c50$b63db4f0$@cyberia.net.sa> <72026e3c-713d-5999-4eee-6f4a408400b6@spamtrap.tnetconsulting.net>
NNTP-Posting-Host	lists.isc.org
Mime-Version	1.0
Content-Type	multipart/signed; protocol="application/pkcs7-signature"; micalg=sha-256; boundary="------------ms030700000300020203020603"
X-Trace	usenet.stanford.edu 1594786703 16434 149.20.1.60 (15 Jul 2020 04:18:23 GMT)
X-Complaints-To	action@cs.stanford.edu
To	bind-users@lists.isc.org
Return-Path	<gtaylor@tnetconsulting.net>
X-Original-To	bind-users@lists.isc.org
Delivered-To	bind-users@lists.isc.org
DKIM-Signature	v=1; a=rsa-sha256; c=simple/simple; d=tnetconsulting.net; s=2019; t=1594786690; bh=8eywSfkxqygCpaBjRy7PgU6qmhakPGA56XLg5U+WiFc=; h=Subject:To:References:From:Message-ID:Date:User-Agent: MIME-Version:In-Reply-To:Content-Type:Cc:Content-Disposition: Content-Language:Content-Transfer-Encoding:Content-Type:Date:From: In-Reply-To:Message-ID:MIME-Version:References:Reply-To: Resent-Date:Resent-From:Resent-To:Resent-Cc:Sender:Subject:To: User-Agent; b=wLfHVHjRU1ozIQURtniAtWlwgKFWsvZtR/o7jhg89iV+MTHV4Xg/u9HA+JT3wgiYk lcx58Y7f83oyLPa768jU7GQgchtDkdclzWI9vXGAV6x812xY+MrBmTUgQZFQWDtW7M yzf7gF3mkS733+wVEugFGmurKtfhUa0R6Hk+kwBA=
User-Agent	Mozilla/5.0 (X11; Linux x86_64; rv:68.0) Gecko/20100101 Thunderbird/68.6.0
In-Reply-To	<134f01d659a5$3cbf3c50$b63db4f0$@cyberia.net.sa>
X-Spam-Status	No, score=-2.2 required=5.0 tests=DKIM_SIGNED,DKIM_VALID, DKIM_VALID_AU,DKIM_VALID_EF,GPG_SIGNED,RCVD_IN_DNSWL_NONE, SPF_HELO_PASS,SPF_PASS autolearn=disabled version=3.4.2
X-Spam-Checker-Version	SpamAssassin 3.4.2 (2018-09-13) on mx.pao1.isc.org
X-BeenThere	bind-users@lists.isc.org
X-Mailman-Version	2.1.29
Precedence	list
List-Id	BIND Users Mailing List <bind-users.lists.isc.org>
List-Unsubscribe	<https://lists.isc.org/mailman/options/bind-users>, <mailto:bind-users-request@lists.isc.org?subject=unsubscribe>
List-Archive	<https://lists.isc.org/pipermail/bind-users/>
List-Post	<mailto:bind-users@lists.isc.org>
List-Help	<mailto:bind-users-request@lists.isc.org?subject=help>
List-Subscribe	<https://lists.isc.org/mailman/listinfo/bind-users>, <mailto:bind-users-request@lists.isc.org?subject=subscribe>
X-Mailman-Original-Message-ID	<72026e3c-713d-5999-4eee-6f4a408400b6@spamtrap.tnetconsulting.net>
X-Mailman-Original-References	<117301d658e1$0f6966a0$2e3c33e0$@cyberia.net.sa> <7f14c6fc-804e-bca2-96f0-eb4c71d088e1@tnetconsulting.net> <134f01d659a5$3cbf3c50$b63db4f0$@cyberia.net.sa>
Xref	csiph.com comp.protocols.dns.bind:15980

Show key headers only | View raw

[Multipart message — attachments visible in raw view] - view raw

On 7/14/20 12:08 AM, MEjaz wrote:
> Thanks for every one’s  contribution.  I use RPZ and listed 5000  forged 
> domain to block it in  a particular zone  without having addiotnal 
> zones, I hope that’s the feature of  RPZ, Seems good.

You might want to look through those domains and see if there are any 
name servers that stick out significantly more than others.

Presuming that there are some believed to be bad name servers, you can 
also use RPZ to filter traffic to said name servers carte blanch, even 
if the names aren't listed in the RPZ, yet.  ;-)

-- 
Grant. . . .
unix || die

Back to comp.protocols.dns.bind | Previous | Next | Find similar

Thread

Re: scripts-to-block-domains Grant Taylor <gtaylor@tnetconsulting.net> - 2020-07-14 22:18 -0600

csiph-web