nV News Forums


nV News Forums (http://www.nvnews.net/vbulletin/index.php)
-   Networking And Security (http://www.nvnews.net/vbulletin/forumdisplay.php?f=58)
-   -   Storm-Worm DNSBL (http://www.nvnews.net/vbulletin/showthread.php?t=98431)

evilghost 09-14-07 01:15 PM

Storm-Worm DNSBL
ISC SANS has reported on a DNS A based RBL to block storm infected clients. More information is available here, http://isc.sans.org/diary.html?storyid=3379

I'm using these iptable rules:


#Storm Worm
  /sbin/iptables -A INPUT -s basic.threatstop.com -j DROP
  /sbin/iptables -A INPUT -s basic1.threatstop.com -j DROP
  /sbin/iptables -A INPUT -s basic2.threatstop.com -j DROP
  /sbin/iptables -A INPUT -s basic3.threatstop.com -j DROP
  /sbin/iptables -A INPUT -s basic4.threatstop.com -j DROP

All times are GMT -5. The time now is 08:11 AM.

Powered by vBulletin® Version 3.7.1
Copyright ©2000 - 2015, Jelsoft Enterprises Ltd.
Copyright 1998 - 2014, nV News.