Re: ho to filter hundeds of domains ?

2012-08-30 Thread Rick Coloccia

add this line to /etc/named.conf

include "locallyblockeddomains.zones";


contents of locallyblockeddomains.zones:

// This bind zone is intended to be included in a running dns server for 
a local net

//
// It will return a 127.0.0.1 for the domains listed as malware
//
//  This is for locally determined domains we want blocked
//
//
zone "r.im"  {type master; file "/etc/namedb/blockeddomain.hosts";};

zone "emailupgrader.clan.su" {type master;file 
"/etc/named/blockeddomain.hosts";};





this is the /etc/namedb/blockeddomain.hosts file:

$TTL86400   ; one day

@   IN  SOA ns1.geneseo.edu coloccia.geneseo.edu (
2007112601  ; serial
28800   ; refresh  8 hours
7200; retry2 hours
864000  ; expire  10 days
86400 ) ; min ttl  1 day

IN  NS  ns1.geneseo.edu.
A   127.0.0.1
*   IN  A   127.0.0.1
*   IN  ::1
; This zone will kill all traffic to a listed domain




Done.

Add domains you want blocked to the locallyblockeddomains.zones file.


-Rick





On 8/30/2012 10:28 AM, Russell Jones wrote:


On 8/30/2012 8:46 AM, wbr...@e1b.org wrote:

Russell Jones wrote on 08/30/2012 09:39:17 AM:


Normal web filtering software that auto updates is a better
approach. Using Bind with a manual list of domains to try to achieve
this is like trying to kill an ant hill 1 ant at a time

There are several sources of RPZ data such as Spamhaus and SURBL.  Both
are respected sources of spam filtering data.

(Disclosure: My employer subscribes to both for spam filtering, I 
have no

financial stake)



Oh I know, I use spamhaus myself for spam filtering - catches a 
ridiculous amount of spam. It is my understanding though the OP wants 
to filter domains for NSFW web browsing, not spam - specifically 
gambling sites.



___
Please visit https://lists.isc.org/mailman/listinfo/bind-users to 
unsubscribe from this list


bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users


--
Rick Coloccia, Jr.
Network Manager
State University of NY College at Geneseo
1 College Circle, 119 South Hall
Geneseo, NY 14454
V: 585-245-5577
F: 585-245-5579

___
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe 
from this list

bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users


Re: Issue with W2008R2 Registration

2011-01-06 Thread Rick Coloccia
There a patch from MS for using non-ms dns.  I don't know exactly where 
to point you, but if you're not using MS DNS you need the patch.  I 
needed my server guys to put it on all their windows boxes to make 
things work properly.


On 1/6/2011 8:59 AM, Holger Honert wrote:

Hi Folks,

we are building up a test environment with W2008R2 Servers registrating
against a bind dns server version 9.6-ESV.

the win-admin gets an error during installation and we can't even
identify the error on our dns server. wireshark traces show no errors
and correct handling.

the error code is:

error code 0x251E DNS_ERROR_BAD_PACKET

any ideas?

thx in advance

Holger


SIGNAL Krankenversicherung a. G., Sitz: Dortmund, HR B 2405, AG Dortmund
IDUNA Vereinigte Lebensversicherung aG für Handwerk, Handel und Gewerbe,
Sitz: Hamburg, HR B 2740, AG Hamburg
Deutscher Ring Krankenversicherungsverein a.G., Sitz: Hamburg,
HR B 4673, AG Hamburg,
SIGNAL IDUNA Allgemeine Versicherung AG, Sitz: Dortmund, HR B 19108,
AG Dortmund
Vorstände: Reinhold Schulte (Vorsitzender),
Wolfgang Fauter (stellv. Vorsitzender), Dr. Karl-Josef Bierth,
Jens O. Geldmacher, Marlies Hirschberg-Tafel,
Michael Johnigk, Ulrich Leitermann, Michael Petmecky,
Dr. Klaus Sticker, Prof. Dr. Markus Warg
Vorsitzender der Aufsichtsräte: Günter Kutz
SIGNAL IDUNA Gruppe Hauptverwaltungen, Internet: www.signal-iduna.de
44121 Dortmund, Hausanschrift: Joseph-Scherer-Str. 3, 44139 Dortmund
20351 Hamburg, Hausanschrift: Neue Rabenstraße 15-19, 20354 Hamburg


___
bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users


--
Rick Coloccia, Jr.
Network Manager
State University of NY College at Geneseo
1 College Circle, 119 South Hall
Geneseo, NY 14454
V: 585-245-5577
F: 585-245-5579

CIT will never ask for your password or other confidential information via 
email.

___
bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users