DNS Signature Lists

cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements
Please sign in to see details of an important advisory in our Customer Advisories area.

DNS Signature Lists

L3 Networker

Does anyone know any free External Dynamic Lists for DNS signatures to use in conjunction with the Palo DNS Signatures? We would like some extra protection for our anti-spyware protection.

4 REPLIES 4

Thanks, Otakar. These are all IP lists though. I was looking for something for DNS sinkholing or blocking requests for malicious domains.

Hello,

Another thing to remember is that dns sinkholing is one of serveral defences that the PAN has. It also uses url filtering and I always recommend blocking the following categories:

 

command-and-control

dynamic-dns

malware

parked

phishing

unknown

 

Think of the sinkhole as your zero-day threat protection and the URL filter as the classic signature based approach.

 

Hope that helps.

@DPoppleton,

malwaredomains.com hosts a relatively decent list but it's only available in a zip file to the best of my knowledge, so you would need to do some manual work on your end for that. Otherwise ZeuS hosts one HERE that's updated on a regular basis and can be fed directly to the firewall. 

  • 2176 Views
  • 4 replies
  • 0 Likes
Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!