08/21/2017
Most modern electronic crime and network abuse relies on the Domain Name System. Protection against these threats must include the Domain Name System…!
A DNS firewall selectively intercepts DNS resolution for known-malicious network assets including domain names, IP addresses, and name servers. Interception can mean rewriting a DNS response to direct a web browser to a “walled garden”, or simply making the malicious network assets invisible and unreachable.
A DNS firewall can block
- Phishing - When a user clicks on a link in an email, for example from a fake banking site, you can intercept the lookup of that site.
- Malware -When a user attempts to navigate to an IP address known to host malware, you can redirect them to a site of your own with instructions on scanning their computer.
- Ransomware - Ransomware, is a type of malware in which someone takes over assets on your network and blocks access to them until you pay a ransom. This is a rapidly growing threat.
- Botnet Command and Control sites - When devices inside your network attempt to contact suspected botnet command central, drop the queries, and log them for analysis and followup.
- Identify Infected Machines - By analyzing the query logs, you can track down the machines in your network that are attempting to contact these abuse sites, and clean up any infections or botnet code.
SWITCH Information Technology Services (Switzerland)
https://securityblog.switch.ch/2015/05/07/protect-your-network-with-dns-firewall/
If you run your own mail server, you will quickly find out that 90% of the e-mails you receive are spam. The solution to this problem is e-mail filtering, which rejects or deletes unwanted spam. Th...
