DNS Firewall

• PowerDNS Configuration
  • Before we start: Spamhaus account, IP addresses
  • Installing PowerDNS on your server
  • Creating a local RPZ zone
  • Loading Spamhaus RPZ zones
  • Optimize setup
  • Logging and Extended Error codes
    • Extended Error codes
    • Logging with protobuf
• BIND Configuration
  • Upgrade to the latest version of BIND
  • Enabling logging of DNS Firewall rewrites
  • Creating a Local Zone
  • Defining Master and Slave Zones
  • Enabling IXFR zone transfers
  • Enabling DNS Firewall
  • Testing
• Distribution Servers
• Zone description
  • Regular Reputation Feeds
    • Bad Reputation Hosts
    • Botnet Command and Control IPs
    • Botnet Command and Control Hosts
    • Adware Hosts
    • Phishing Hosts
    • Malware Hosts
    • Botnet Hosts
    • Bad Nameserver Hosts
    • Bad Nameserver IPs
    • Bogons IPs
    • Domain Generated Algorithm (DGA)
    • Do Not Route or Peer (DROP)
  • Edited Reputation Feeds
    • Edited Bad Reputation Hosts
    • Edited Phishing Hosts
    • Edited Malware Hosts
    • Edited Adware Hosts
    • Edited BotnetCC Hosts
    • Edited Botnet Hosts
  • Hacked Feeds
    • Hacked Bad Reputation Hosts
    • Hacked Phishing Hosts
    • Hacked Malware Hosts
    • Hacked BotnetCC Hosts
    • Hacked BotnetCC IPs
  • Premium Feeds
    • Zero Reputation Domains**
  • Service Feeds
    • Torblocker
    • Coinblocker
    • Porn