[ASK] Block Malware Generate Random Subdomain, Domain and TLD

Syaifudin syaifudin at jsn.net.id
Wed Jan 17 12:41:34 UTC 2018


Hi all,
is there regex for bind config or something else to anticipation or block
malware where generate random subdomain ( 2 or 3 character )+ random domain
( 7 character ) + random tld.
log bind show in picture in this link  Malware Generate Random Subdomain,
Domain and TLD <https://pbs.twimg.com/media/DTlz0ifVoAAD6-h.jpg:large>  
for now i use iptables and REGEX (  KPCRE
<https://github.com/xnsystems/kpcre>   )



thank's




--
Sent from: http://bind-users-forum.2342410.n4.nabble.com/


More information about the bind-users mailing list