Recommend DNS services to fight against malware

Discussion in 'other anti-malware software' started by Kernelwars, Aug 17, 2010.

Thread Status:
Not open for further replies.
  1. Bambo

    Bambo Registered Member

    Joined:
    Dec 10, 2006
    Posts:
    194
    You should check Barracuda http://www.barracudacentral.org/ since that is what DynDns use. From what I can tell their stats are impressive and that makes them very special compared to any other security company ;)

    Opendns does block malware but not for free, Enterprise only http://www.opendns.com/start/ They have the name and their stats/control panel going for them, besides that not so much.
     
    Last edited: Apr 7, 2011
  2. Trooper

    Trooper Registered Member

    Joined:
    Jan 26, 2005
    Posts:
    5,507
    I'm testing out DynDNS. Id try Norton or ClearCloud but they don't offer content filtering correct?
     
  3. dw426

    dw426 Registered Member

    Joined:
    Jan 3, 2007
    Posts:
    5,543
    They don't seem to, no. (ClearCloud user here)
     
  4. elapsed

    elapsed Registered Member

    Joined:
    Apr 5, 2004
    Posts:
    7,076
    Norton started offering content filtering.
     
  5. doktornotor

    doktornotor Registered Member

    Joined:
    Jul 19, 2008
    Posts:
    2,047
    What do you exactly mean by "content filtering"?
     
  6. Trooper

    Trooper Registered Member

    Joined:
    Jan 26, 2005
    Posts:
    5,507
    Thanks for the url and information. They do actually offer some malware protection etc for the 10 dollar per year paid service. Which recently paid for itself after blocking conficker. But yeah, enterprise version is better.

    I'm missing the stats and logs with DynDNS vs. OpenDNS. But if DynDNS is better overall, then I plan on sticking with DynDNS.

    Thanks again.
     
  7. Trooper

    Trooper Registered Member

    Joined:
    Jan 26, 2005
    Posts:
    5,507
    Thanks for the information. Will keep this in mind for future reference. At the moment I trying DynDNS out.
     
  8. Trooper

    Trooper Registered Member

    Joined:
    Jan 26, 2005
    Posts:
    5,507
    The ability to block sites by category and domain, a la OpenDNS and DynDNS.
     
  9. doktornotor

    doktornotor Registered Member

    Joined:
    Jul 19, 2008
    Posts:
    2,047
    Ah, configurable. OK... I have though you mean something beyond DNS level.
     
  10. Trooper

    Trooper Registered Member

    Joined:
    Jan 26, 2005
    Posts:
    5,507
    Nah. Maybe I will check out Norton down the road, but not really a Symantec fan to be honest.
     
  11. BoerenkoolMetWorst

    BoerenkoolMetWorst Registered Member

    Joined:
    Dec 22, 2009
    Posts:
    4,868
    Location:
    Outer space
    Anyone tried Mailshell DNS? Avast Pro and IS uses it in the new SafeZone browser feature. They say they use 256 bit AES encryption, but it doesn't say what they encrypt and when, they don't use DNSSEC however.
     
    Last edited: Apr 14, 2011
  12. Aeolis

    Aeolis Registered Member

    Joined:
    Apr 10, 2010
    Posts:
    60
    Hello folks,

    @BoerenkoolMetWorst: I took a look on Mailshell DNS site and their list of features is pretty impressive. They have some pie charts comparing their services to several other common DNS alternatives.

    Well, better wait for someone with experience with Mailshell DNS to post here.

    See you later,

    Aeolis
     
  13. BoerenkoolMetWorst

    BoerenkoolMetWorst Registered Member

    Joined:
    Dec 22, 2009
    Posts:
    4,868
    Location:
    Outer space
    Yes, I saw the charts too, but I'm not sure how accurate/up-to-date they are, as for example, using GRC's DNS spoofability test(https://www.grc.com/dns/dns.htm) shows that Clearcloud DOES support DNSSEC(haven't tried others yet.)
     
  14. doktornotor

    doktornotor Registered Member

    Joined:
    Jul 19, 2008
    Posts:
    2,047
    Spoofability tests have nothing to do with DNSSEC, at all.
     
  15. TonyW

    TonyW Registered Member

    Joined:
    Oct 12, 2005
    Posts:
    2,741
    Location:
    UK
    Does this press release help at all? It looks like the encryption comes into play especially when doing online banking and other such financial transactions.
     
    Last edited: Apr 14, 2011
  16. SweX

    SweX Registered Member

    Joined:
    Apr 21, 2007
    Posts:
    6,429
    I just saw this article:http://www.eweekeurope.co.uk/news/barracuda-networks-embarrassed-by-database-hack-26539

    Very trustworthy indeed :rolleyes:
     
  17. Vilmalith

    Vilmalith Registered Member

    Joined:
    Nov 28, 2007
    Posts:
    68
    I was using ClearCloud but have since switched back to DynDNS. For me ClearCloud is getting very slow. ClearCloud started off with an avg response of 21ms for me and 10+hops. Been noticing more browsing slowness and time outs the past month or two. Testing today shows it at 47ms and 23+hops now.

    I may try Norton DNS, but I swear it's the same as DynDNS service but slower for me for some reason. Just a hair slower, but slower none the less.

    So for me, taking an avg of my results over the past month listed in order of speed:

    DynDNS - 8.3ms, 9+hops
    Norton DNS - 10ms, 10+hops
    Comodo DNS - 13.6ms, 13hops
    ClearCloud - 47ms, 23+hops
    Mailshell - 49ms, 32+hops (this varies, response time 30 - 62ms and hops 17 - 43... not sure why there is such a big variation)

    DynDNS and Norton DNS are the only third party DNS providers I've ever tested over a month + time that are consistently faster then my own ISPs. And they of course come with that added layer of protection too.
     
  18. Trooper

    Trooper Registered Member

    Joined:
    Jan 26, 2005
    Posts:
    5,507
  19. Trooper

    Trooper Registered Member

    Joined:
    Jan 26, 2005
    Posts:
    5,507
    I'm in the same boat as you. I did not try Mailshell but everything for me was slower than DynDNS. OpenDNS was maybe a tad faster, but not really noticeable very much.

    I've been happy with DynDNS overall but am a bit disappointed with what Swex posted above. :(
     
  20. Page42

    Page42 Registered Member

    Joined:
    Jun 18, 2007
    Posts:
    6,941
    Location:
    USA
    I decided to use Norton DNS for awhile, because like you, ClearCloud seemed to be getting slower.
    In the absence of any benchmark tests, I realize that it could be something else.
    And I already have the ClearCloud blocklist in VIPRE, so that's a plus.
     
  21. Vilmalith

    Vilmalith Registered Member

    Joined:
    Nov 28, 2007
    Posts:
    68

    Depending on which version of that article you read, barracuda themselves got "hacked" during a maintenance downtime on their own personal firewall. This intrusion did not affect affiliates such as DynDNS and NortonDNS.
     
  22. The Seeker

    The Seeker Registered Member

    Joined:
    Oct 24, 2005
    Posts:
    1,338
    Location:
    Adelaide
    I've found Norton DNS to be the best combination of speed and security. Steve Gibson's DNS Benchmark consistently ranks Norton well above Sunbelt.
     
  23. Page42

    Page42 Registered Member

    Joined:
    Jun 18, 2007
    Posts:
    6,941
    Location:
    USA
    Purely anecdotal, but yesterday evening while using Norton DNS, my browsing speed was bogging down considerably... in fact speed is the wrong word to use to describe it. ;)

    I currently have Comodo Secure DNS configured as the alternate service behind Norton, so I bumped Comodo up the list to primary and the slowness disappeared as if I had flipped a switch. I confirmed which service I was using (no longer Norton), and so indeed, Comodo Secure DNS had made a huge difference... at least for last night.

    On another note, having tried OpenDNS for a brief while, last week I sent an email inquiry to their support people about the deluxe version (when I was unable to navigate to the deluxe order page), and was told that they no longer offer it...
    All FWIW. :)
     
  24. m00nbl00d

    m00nbl00d Registered Member

    Joined:
    Jan 4, 2009
    Posts:
    6,623
    Yes, I experienced that as well. As soon as I added CC DNS IPs, things went back to normal. :ouch:

    I hope it won't happen again. :argh:
     
  25. elapsed

    elapsed Registered Member

    Joined:
    Apr 5, 2004
    Posts:
    7,076
    How confusing, because here you state Norton was faster than CC for you.
     
Thread Status:
Not open for further replies.
  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.