[RPZ] Whitelist rather than Blacklist
Andrew Fried
afried at isc.org
Mon Mar 4 06:21:46 UTC 2013
An awful lot of malware use domains in the alexa list. I'd be pretty
hesitant arbitrarily whitelisting based on a "most popular" or most used.
Andy
On 3/3/13 9:56 PM, Tom Byrnes wrote:
> If there is interest in a dynamic version of this, say the alexa 1000 as a whitelist and deny all else, we can gen it @ ThreatSTOP.
>
> We already enable this in our IP product (we call it "IP Closed User Group").
>
> _______________________________________________
> dnsrpz-interest mailing list
> dnsrpz-interest at lists.isc.org
> https://lists.isc.org/mailman/listinfo/dnsrpz-interest
--
Andrew Fried
Internet Systems Consortium, Inc.
afried at isc.org
+1.650.423.1343
More information about the DNSfirewalls
mailing list