DNS sinkhole
This article needs additional citations for verification. (November 2021) |
A DNS sinkhole, also known as a sinkhole server, Internet sinkhole, or Blackhole DNS
By default, the local hosts file on a computer is checked before DNS servers, and can be used to block sites in the same way.
Applications
Sinkholes can be used both constructively, to contain threats such as
DNS sinkholing can be used to protect users by intercepting DNS request attempting to connect to known malicious domains and instead returning an IP address of a sinkhole server defined by the DNS sinkhole administrator.
References
- ^ kevross33, pfsense.org (November 22, 2011). "BlackholeDNS: Anyone tried it with pfsense?". Retrieved October 12, 2012.
{{cite news}}
: CS1 maint: numeric names: authors list (link)[permanent dead link] - ^ Kelly Jackson Higgins, sans.org (October 2, 2012). "DNS Sinkhole - SANS Institute". Retrieved October 12, 2012.
- ^ Kelly Jackson Higgins, darkreading.com (October 2, 2012). "Microsoft Hands Off Nitol Botnet Sinkhole Operation To Chinese CERT". Retrieved September 2, 2015.
- ^ Hay Newman, Lily (2017-05-13). "The WannaCry Ransomware 'Kill Switch' That Saved Untold PCs From Harm". Wired. Archived from the original on 2022-06-27. Retrieved 2022-08-19.
- ^ Symantec Security Response (December 1, 2016). "Avalanche malware network hit with law enforcement takedown". Symantec Connect. Symantec. Retrieved December 3, 2016.
- ^ Europol (December 1, 2016). "'Avalanche' network dismantled in international cyber operation". europol.europa.eu. Europol. Retrieved December 3, 2016.
- ENISA. Retrieved 2022-08-19.
- ^ Hay Newman, Lily (2018-01-02). "Hacker Lexicon: What Is Sinkholing?". Wired. Retrieved 2022-08-19.
- ^ Dan Pollock, someonewhocares.org (October 11, 2012). "How to make the Internet not suck (as much)". Retrieved October 12, 2012.
- ^ "Turn A Raspberry Pi Into An Ad Blocker With A Single Command". Lifehacker Australia. 2015-02-17. Retrieved 2018-05-06.