<html>
<head>
<meta content="text/html; charset=windows-1252"
http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
Hi,<br>
<br>
I have updated my 2 dnsfirewall howto's. <br>
1. Dns firewall howto (POC setup bind dns firewall [caching dns
(sec) resolver] with demonstration rpz zone)<br>
2. Arming the dns firewall (added automatical download of open
bad-domains lists daily, so you are protected against reported
ip-ranges and domains)<br>
<br>
As on this list you probably know, an ip-firewall can protect your
users from scams and downloads in (email) or via links on webpages
by blocking ranges of ip-addresses, domains or dns-servers.<br>
It is essentially a web-filter, but also for other ports than only
80 and 443 (IE port 53).<br>
<br>
You can find the newest versions of the howto's here:<br>
<a class="moz-txt-link-freetext" href="https://app.younited.com/?shareObject=6e808cfb-1640-d4b6-7d72-6d0bcbeb2e58">https://app.younited.com/?shareObject=6e808cfb-1640-d4b6-7d72-6d0bcbeb2e58</a><br>
<br>
Amongst others I have added one line in the bind configuration so
the bind version also resolves dnssec.<br>
I have been using this rpz firewall for a few months now and it
seems to be rock solid.<br>
<br>
The version on ISC:<br>
<a class="moz-txt-link-freetext"
href="http://www.isc.org/wp-content/uploads/2014/05/dns-firewall-howto.pdf">http://www.isc.org/wp-content/uploads/2014/05/dns-firewall-howto.pdf</a><br>
<br>
is now obsolete.<br>
<br>
Vriendelijke groet, Hans-Cees Speel (<a class="moz-txt-link-abbreviated" href="mailto:hanscees@hanscees.com">hanscees@hanscees.com</a>)<br>
<br>
* Eigenaar <a href="http://www.bomengids.nl">bomengids.nl</a> (<a
href="http://twitter.com/bomengidsnl">volg twitter</a>) <br>
* <a href="http://nl.linkedin.com/in/hanscees">Linked-in profile
Hans-Cees</a><br>
<br>
</body>
</html>