3 ms·
I run BIND at home for my network and take advantage of that to do the following: https://isc.sans.edu/diary/Easy+DNS+BIND+Sinkhole+Setup/7930 https://isc.sans.
by mhurron 14y ago
I run BIND at home for my network and take advantage of that to do the following:
https://isc.sans.edu/diary/Easy+DNS+BIND+Sinkhole+Setup/7930 https://isc.sans.edu/diary/Easy+DNS+BIND+Sinkhole+Setup/7930
I also have a webserver that any black holed domain is sent to so that there is no waiting for a web request to time out. The first time I put it in place I didn't have the webserver so the performance when hitting one of these was horrible. I also use it for any ad server or analytic site I want to permanently block.
This way I don't have to distribute and update a hosts file to every machine in the house and I control where the offending sites redirect too.
- davidcollantes 14y agoExactly this. I have been creating master zones on my named.conf and pointing them to a blocked.txt file. My method is more cumbersome, the one you linked is very streamlined. Excellent, and thanks!
- mhurron 14y agoI also made a little thing for adding additional zones to the list when I was playing a little with Bootstrap. I wrote a little page to add, enable and disable (if I blocked something important) entries. Then a cron job to pull the enabled domains, build the conf file and reload BIND.