DNS Sink Hole not working

RobinClayton — Wed, 14 Feb 2018 12:56:37 GMT

8.0.4

I am trying to get SinkHole to work... Not having any luck,

using a dns from the release notes of 2520-3016

nslookup gefndb.com

returns the real address

All looks correct, just does not seem to work

-----------------------------------------------------

set rulebase security rules "Rule 1" from TRUST
set rulebase security rules "Rule 1" to UNTRUST
set rulebase security rules "Rule 1" source Domain_Controllers
set rulebase security rules "Rule 1" destination any
set rulebase security rules "Rule 1" source-user any
set rulebase security rules "Rule 1" application any
set rulebase security rules "Rule 1" service [ DNS ]
set rulebase security rules "Rule 1" hip-profiles any
set rulebase security rules "Rule 1" category any
set rulebase security rules "Rule 1" action allow
set rulebase security rules "Rule 1" log-end yes
set rulebase security rules "Rule 1" profile-setting profiles spyware My_default

set profiles spyware MY_default botnet-domains lists default-paloalto-dns action sinkhole
set profiles spyware MY_default botnet-domains sinkhole ipv4-address pan-sinkhole-default-ip
set profiles spyware MY_default botnet-domains sinkhole ipv6-address ::1

Re: DNS Sink Hole not working

reaper — Wed, 14 Feb 2018 14:29:26 GMT

gefndb.com is no longer listed as malware I think, try this domain:

umekana.ru

> umekana.ru
Server: b.resolvers.level3.net
Address: 4.2.2.2

Non-authoritative answer:
Name: umekana.ru
Addresses: ::1
1.1.1.1

Re: DNS Sink Hole not working

RobinClayton — Wed, 14 Feb 2018 15:03:35 GMT

That one is not in my Installed or Latest download.

However, I was basing my attempts on the "Installed" AV version, I picked one from the latest downloaded and that is sinkholed correctly.

Cheers

Rob

topic Re: DNS Sink Hole not working in General Topics

DNS Sink Hole not working

Re: DNS Sink Hole not working

Re: DNS Sink Hole not working