[Dshield] RE: FriendGreetings Worm is back

John Hardin johnh at aproposretail.com
Thu Oct 31 20:22:15 GMT 2002


On Thu, 2002-10-31 at 10:06, Russell Washington wrote:
> It sounds like they're moving the www sites around to avoid folks doing
> exactly what we're trying to do.  With that in mind I'd say the best
> blackholing strategy might just be to spoof authoritative DNS on your own
> DNS server so that the thing just plain won't resolve.

Does anybody know a quick and easy way to blackhole a domain in DNS
(short of the entire process of setting up an authority file, etc.)

-- 
John Hardin  KA7OHZ                           <johnh at aproposretail.com>
Internal Systems Administrator                    voice: (425) 672-1304
Apropos Retail Management Systems, Inc.             fax: (425) 672-0192
-----------------------------------------------------------------------
 ...people confuse "security" and "Trustworthy Computing."
                                 - Craig Mundie, MS Senior VP and CTO
-----------------------------------------------------------------------
 48 days until The Two Towers




More information about the list mailing list