Skip to main content
PatG
PatG
New Member
March 5, 2017
Question

DNS Filter hosted DNS server

  • March 5, 2017
  • 1 reply
  • 2792 views

I have a split DNS system installed in my network.

 

My external DNS only serves DNS records for my 3 domains.

 

I have been receiving a lot of spurious DNS queries associated with DNS amplification attacks, which all get rejected by bind. However I would like to block these requests at the firewall rather than passing them to my externally facing DNS.

 

So what what I would like to do is:

[ul]
  • Allow queries to:[ul]
  • example1.com
  • example2.com
  • example3.com[/ul]
  • But block queries to any other domain.[/ul]

    Any ideas?

     

    Thanks,

    Pat

      • 1 reply

      ede_pfau
      SuperUser
      ede_pfau
      SuperUser
      March 6, 2017

      A custom IPS signature would be an option. No fancy stuff inside, just matching '^(dom1.com|dom2.com|dom3.com)'.

      Actually, you could open a ticket an ask FTNT if they would help out with this.

      Terms & ConditionsAccessibility statement