<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Help With MineMeld for Domain Blocking for DNS Sinkhole in General Topics</title>
    <link>https://live.paloaltonetworks.com/t5/general-topics/help-with-minemeld-for-domain-blocking-for-dns-sinkhole/m-p/76696#M99576</link>
    <description>&lt;P&gt;Hello&amp;nbsp;&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;I am new to MindMeld and I am seeking help with an issue:&amp;nbsp;&lt;/P&gt;
&lt;P&gt;I wanted to configure an External Block List to use with DNS sinkhole. I need a spyware blocking of malicous sites (Like URLF) but one that will work based ib DNS only!&amp;nbsp;&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;I tried to use the miner on the mindmeld default config with no luck - Its seems that all of them are IP based (Not working with DNS Sinkhole). Can anyone explain how can I configure a domain basked list?&amp;nbsp;&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;Thanks in advanced&amp;nbsp;&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;Eliram&amp;nbsp;&lt;/P&gt;</description>
    <pubDate>Tue, 19 Apr 2016 18:21:18 GMT</pubDate>
    <dc:creator>Eliram</dc:creator>
    <dc:date>2016-04-19T18:21:18Z</dc:date>
    <item>
      <title>Help With MineMeld for Domain Blocking for DNS Sinkhole</title>
      <link>https://live.paloaltonetworks.com/t5/general-topics/help-with-minemeld-for-domain-blocking-for-dns-sinkhole/m-p/76696#M99576</link>
      <description>&lt;P&gt;Hello&amp;nbsp;&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;I am new to MindMeld and I am seeking help with an issue:&amp;nbsp;&lt;/P&gt;
&lt;P&gt;I wanted to configure an External Block List to use with DNS sinkhole. I need a spyware blocking of malicous sites (Like URLF) but one that will work based ib DNS only!&amp;nbsp;&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;I tried to use the miner on the mindmeld default config with no luck - Its seems that all of them are IP based (Not working with DNS Sinkhole). Can anyone explain how can I configure a domain basked list?&amp;nbsp;&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;Thanks in advanced&amp;nbsp;&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;Eliram&amp;nbsp;&lt;/P&gt;</description>
      <pubDate>Tue, 19 Apr 2016 18:21:18 GMT</pubDate>
      <guid>https://live.paloaltonetworks.com/t5/general-topics/help-with-minemeld-for-domain-blocking-for-dns-sinkhole/m-p/76696#M99576</guid>
      <dc:creator>Eliram</dc:creator>
      <dc:date>2016-04-19T18:21:18Z</dc:date>
    </item>
    <item>
      <title>Re: Help With MineMeld for Domain Blocking for DNS Sinkhole</title>
      <link>https://live.paloaltonetworks.com/t5/general-topics/help-with-minemeld-for-domain-blocking-for-dns-sinkhole/m-p/76699#M99577</link>
      <description>&lt;P&gt;Hi Eliram,&lt;/P&gt;
&lt;P&gt;all the miners in the default config are connected to feeds IP-only. You need a miner for a feed generating domain indicators. One is the AutoFocus miner, another one is&amp;nbsp;ransomwaretracker.RW_DOMBL. You can connect it directly to an output node based on &lt;STRONG&gt;stdlib.feedHCWithValue&lt;/STRONG&gt;, or you can attach it to a new chain&amp;nbsp;&lt;STRONG&gt;stdlib.aggregatorDomain&lt;/STRONG&gt;&amp;nbsp;-&amp;gt;&lt;STRONG&gt;&amp;nbsp;stdlib.feedHCWithValue.&lt;/STRONG&gt;&lt;/P&gt;
&lt;P&gt;You may want to use the chain if you plan to add new domain miners in the future.&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;Luigi&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;</description>
      <pubDate>Tue, 19 Apr 2016 19:51:58 GMT</pubDate>
      <guid>https://live.paloaltonetworks.com/t5/general-topics/help-with-minemeld-for-domain-blocking-for-dns-sinkhole/m-p/76699#M99577</guid>
      <dc:creator>lmori</dc:creator>
      <dc:date>2016-04-19T19:51:58Z</dc:date>
    </item>
  </channel>
</rss>

