topic Re: DNS Sinkhole question in General Topics

DNS Sinkhole question

clyde.franklin — Tue, 12 Apr 2016 06:36:37 GMT

Can DNS Sinkhole be done with Vwire configuration or does it need to be Layer 3?

Re: DNS Sinkhole question

singh — Tue, 12 Apr 2016 08:37:15 GMT

Hey...yes, DNS sinkhole can be configured with vwire also.

Re: DNS Sinkhole question

reaper — Tue, 12 Apr 2016 10:28:50 GMT

yes this will work. the firewall will block the DNS and forge/spoof a reply packet containing the sinkhole IP address and send that to the client

Re: DNS Sinkhole question

clyde.franklin — Tue, 12 Apr 2016 13:43:05 GMT

Thanks guys!!! My last question is if I have vwire already setup can I just modify antispyware profile to sinkhole on that rule or do I need a actual new zone for sinkhole and a new rule? In vwire how do I test this? I assume I need someone sitting behind the firewall in my lab to try to access a malicous domain? FYI This is internal user to internal DNS setup

Re: DNS Sinkhole question

santonic — Wed, 13 Apr 2016 06:50:47 GMT

You can configure it in existing security profile.

Re: DNS Sinkhole question

Retired Member — Thu, 02 Jun 2016 16:15:05 GMT

Hi all,

If the Threate prevention subscription is needed for DNS sinkhole ?

regards,

Bruce