So an item of note that I noticed is that the "quick start" guide:
http://www.threatstop.com/sites/default/files/threatstop_quickstart_guide.pdf is more about getting the ThreatSTOP interface configured than an actual BIND DNS server. It might be the day that I am having but it sure was a slog to read through it. It also may be due to tunnel vision as the biggest question that I had was how does this service actually get enabled on BIND. For anyone that is curious, the config of a BIND server can be found here: http://dochub.threatstop.com/pages/viewpage.action?pageId=5079062 Personally, I prefer to zone transfer a blacklist but that is just me due to extra chatter/leakage/yadda-yadda-yadda. I also found it interesting that while the trial signup page is HTTPS, if you want to upload a logfile for analyzing, that URL is just HTTP: http://www.threatstop.com/checkip http://www.threatstop.com/checklogs http://www.threatstop.com/sinkhole I know that HTTPS is not the end all, be all but common guys you are a security company. As the phrase goes, "perception is reality" and something about having good form .. John -----Original Message----- From: bind-users [mailto:bind-users-boun...@lists.isc.org] On Behalf Of Matt Foster Sent: Thursday, October 06, 2016 11:40 AM To: bind-users@lists.isc.org Subject: ThreatSTOP BIND DNS Firewall Available Hi All, just wanted to let you know that ThreatSTOP's DNS Firewall for BIND has just been released and evaluations are available at the below link, we would like to invite you to test it out. https://www.threatstop.com/index.php?page=index&action=trial DNS Firewall policies can be custom created, all driven from a live threat intel database pulled from over 50 sources as well as our own security research. Multiple responses can be configured within the policies and a high level of customization is available within reports and alerting. Fair warning I work at ThreatSTOP There is no cost or commitment to evaluate the solution, we welcome market feedback. m...@threatstop.com www.threatstop.com -- View this message in context: http://bind-users-forum.2342410.n4.nabble.com/ThreatSTOP-BIND-DNS-Firewall-Available-tp3027.html Sent from the Bind-Users forum mailing list archive at Nabble.com. _______________________________________________ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users _______________________________________________ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users
