DNS Sinkhole question

[clyde.franklin]

Can DNS Sinkhole be done with Vwire configuration or does it need to be Layer 3?

[singh · Accepted solution]

Hey...yes, DNS sinkhole can be configured with vwire also. 

[reaper]

Hi

yes this will work. the firewall will block the DNS and forge/spoof a reply packet containing the sinkhole IP address and send that to the client

[clyde.franklin]

Thanks guys!!! My last question is if I have vwire already setup can I just modify antispyware profile to sinkhole on  that rule  or do I need a actual new zone  for sinkhole and a new rule? In vwire how do I test this? I assume I need someone sitting behind the firewall in my lab to try to access a malicous domain? FYI This is internal user to internal DNS setup

[santonic]

You can configure it in existing security profile.

[blan]

Hi all,

If the Threate prevention subscription is needed for DNS sinkhole ?

regards,

Bruce