This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Blocking Dynamic DNS sites

Is there a category that allows you to block access to dynamic DNS sites such as dtdns.net, etc. A lot of advanced malware these days use dynamic DNS to get around IP blocks. I know web sense and bluecoat have this capability - does UTM?

This thread was automatically locked due to age.

0 BarryG over 11 years ago

Hi,

Using the right RBLs in the Mail Protection would block emails from them.

You can also block by domain in the Web Protection system.

For other traffic, this is probably technically feasible with the MaxMind data that is used for the GeoIP blocking, but afaik is not currently implemented.

You can request it at UTM (Formerly ASG) Feature Requests: Hot (1861 ideas)

Barry
Cancel
Vote Up 0 Vote Down

Cancel
0 ManuelKarl over 11 years ago in reply to BarryG

Hello mlines,

try to block category "Residential IP Adresses", which (normally) means home computers connected via cable or dsl (dynamic ip from a ressource pools of isp's).

Maybe this works.
Cancel
Vote Up 0 Vote Down

Cancel
0 BAlfson over 11 years ago

Umpf, I think that selection got phased out, and that the only way now is to add zen.spamhaus.org or some other DNSBL that tracks dynamic IP ranges.

Cheers - Bob
Cancel
Vote Up 0 Vote Down

Cancel