[RPZ] Whitelist rather than Blacklist

Andrew Fried afried at isc.org
Mon Mar 4 06:21:46 UTC 2013


An awful lot of malware use domains in the alexa list.  I'd be pretty
hesitant arbitrarily whitelisting based on a "most popular" or most used.

Andy

On 3/3/13 9:56 PM, Tom Byrnes wrote:
> If there is interest in a dynamic version of this, say the alexa 1000 as a whitelist and deny all else, we can gen it @ ThreatSTOP.
>
> We already enable this in our IP product (we call it "IP Closed User Group").
>
> _______________________________________________
> dnsrpz-interest mailing list
> dnsrpz-interest at lists.isc.org
> https://lists.isc.org/mailman/listinfo/dnsrpz-interest

-- 
Andrew Fried
Internet Systems Consortium, Inc.
afried at isc.org
+1.650.423.1343




More information about the DNSfirewalls mailing list