DNS Sinkhole - SANS Institute

Interested in learning more about security?

SANS Institute InfoSec Reading Room This paper is from the SANS Institute Reading Room site. Reposting is not permitted without express written permission.

DNS Sinkhole This paper describes the architecture and configuration of a complete Domain Name Services (DNS) sinkhole system based on open-source software. The DNS sinkhole can be used to provide detection and prevention of malicious and unwanted activity occurring between organization computer systems and the Internet. The system is inexpensive, effective, scalable and easy to maintain.

AD

Copyright SANS Institute Author Retains Full Rights

! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! !

DNS Sinkhole GIAC (GCIH) Gold Certification !"#$%&'()"*(+&",-."/(0--1-&23$4#-$.#056.( ( !7840%&'(9461(:.,,-&(

!66-;#-7'(!"