Hosts File - what do you use and why?

Discussion in 'other anti-malware software' started by Blackspear, May 1, 2005.

Thread Status:
Not open for further replies.
  1. Blackspear

    Blackspear Global Moderator

    Joined:
    Dec 2, 2002
    Posts:
    15,115
    Location:
    Gold Coast, Queensland, Australia
    Last edited: May 1, 2005
  2. no13

    no13 Retired Major Resident Nutcase

    Joined:
    Sep 28, 2004
    Posts:
    1,327
    Location:
    Wouldn't YOU like to know?
    Didn't you ask him?


    I use a combo hosts file from 10 or so sources, updated every 6 months or so. 36,640 or so entires last time I checked.
     
  3. cluessnewbie

    cluessnewbie Guest

    Sounds paranoid enough, but updating every 6 months might be too slow.
     
  4. rdsu

    rdsu Registered Member

    Joined:
    Jun 28, 2003
    Posts:
    4,537
    Hi Blackspear :),

    I'm using the MVPS Hosts file with the new version of HostsMan, but it seems that the hosts file provided by Bluetack is the union of the most important hosts file out there... ;)

     
  5. Rmus

    Rmus Exploit Analyst

    Joined:
    Mar 16, 2005
    Posts:
    4,020
    Location:
    California
    I'm wondering if using a robust firewall that monitors all incoming/outgoing traffic is just as effective.

    With known pharming malware that can alter the Hosts file, only by checking the IP address as it attempts to connect out can you avoid redirection.

    ---
    Rmus
     
  6. squash

    squash Registered Member

    Joined:
    Mar 25, 2005
    Posts:
    313
    I use this one, it is _the_ most comprehensive hosts file I have come across and is regularly updated.

    http://remember.mine.nu/

    It's a 5MB host file, for the "extended version" I use this in conjuction with Adblock.
     
  7. no13

    no13 Retired Major Resident Nutcase

    Joined:
    Sep 28, 2004
    Posts:
    1,327
    Location:
    Wouldn't YOU like to know?
    way too slow [if not your router's firewall]
     
  8. Ronin

    Ronin Guest

    About blocking by ip versus hosts files (blocking by domainname)

    Hard to say if it will be slower.

    But blocking sites by ip addresses as opposed to by domainnames(host files) as pros and cons for both methods.

    It's better to have both.

    A real replacement for a host file is to use a custom DNS server to resolve DNS lookups, so you can filter results using regexp. Eg instead of putting every variant of doubleclick domains in your hosts file you can specify, doubleclick* . It will also be way faster than a hosts file.

    You can also use proxomitron and similar software but they don't have a system wide effect compared to a custom DNS server
     
  9. no13

    no13 Retired Major Resident Nutcase

    Joined:
    Sep 28, 2004
    Posts:
    1,327
    Location:
    Wouldn't YOU like to know?
    do you know how to do that to Treewalk?
    I really haven't tried any major surgery on it yet... there's a thread I started about it in S&S.
    I'll bump it with an update soon.
     
  10. Moore

    Moore Registered Member

    Joined:
    Mar 14, 2004
    Posts:
    82
    Location:
    land of ?z
    Hi Blackspear :)

    Just thought I'd add a bit more info .. :D

    As well as including a lot of the great research from those fine sources , we also have our own team of IP hunters that scour the internet for new IP's and domains every day , for addition to the blacklists and hosts file which are updated daily.

    The free software we provide gives our users the ability to block unwanted sites and various companies by domain and by IP address.. The best combination in my opinion..

    I've found many malware sites that do not have a reverse dns that can be blocked in a hosts file.

    The biggest downside to IP blocking is when you have for example webhosts like Godaddy who host literally hundreds of thousands of sites on a single IP address , and to block one , you have to block them all..

    I prefer to use the Outpost firewall plugin Blockpost for IP blocking in conjunction with the hosts file to keep out the nasties.. Anything malicious that gets through my setup will be logged in Outpost and added to one of the appropriate lists.

    Using the Blocklist Manager and Hosts Manager makes it easier to maintain your own personal IP blocklists/hosts from the data we have available. If you dont like something in the lists , then you can just delete it and save the changes.

    Both programs offer a personal Exclusions and Inclusions manager to make life a bit easier for people.

    HPGuru's Hosts file was once a source in our old hosts file , basically he didnt approve of it , so to prevent any long term anguish we removed it for him. ;)
     
  11. Capp

    Capp Registered Member

    Joined:
    Oct 16, 2004
    Posts:
    2,125
    Location:
    United States
    What I use: MVPS Host file

    Why I use it: It, along with my pop-up blockers, keep a lot of crap from flying at me while surfing the web.

    Plus, at my place of business, I can "lock" certain sites by having them redirected to localhost and thus keep the users from browsing to places I do not want them to go :D
     
  12. Infinity

    Infinity Registered Member

    Joined:
    May 31, 2004
    Posts:
    2,651
    what I use: spyblocker and built in host (which we've been compiling for three years now)

    grtz.
     
  13. rdsu

    rdsu Registered Member

    Joined:
    Jun 28, 2003
    Posts:
    4,537
    I use the MVPS Hosts file because of its quality...

    Basically, is an Anti-Spyware to protect you and prevent against a lot of threats... ;)
     
  14. ErikAlbert

    ErikAlbert Registered Member

    Joined:
    Jun 16, 2005
    Posts:
    9,455
    What I use : MVPS Hosts File, but I'm not a client of Capp-Ware.

    Why I use it :

    1) After installing win2000proSP4, my host file was empty (typical for M$).
    So I said by myself "When M$ doesn't use it, I'm going to use it for myself."

    2) A security expert told me to use the MVPS Hosts File :
    http://www.mvps.org/winhelp2002/hosts.htm (The Rolls-Royce amongst the hosts files.)

    3) The Hosts File is a PREVENTING tool and protects me from visiting infected websites.
    So I don't need to spend my time on removing malware, caused by these websites and when I don't have to work, I'm happy.
    I feel that protection every day, when I search or surf on the internet, using Firefox and it saved my computer many times.
    Simplicity is always brilliant and that's what the hosts file is.
    ErikAlbert.
     
  15. WSFuser

    WSFuser Registered Member

    Joined:
    Oct 7, 2004
    Posts:
    10,639
    What I use: the MVPS hosts file

    Why I use: its free and of good quality, helps with blocking bad pages, and its a piece of security that works universally (all browsers).
     
    Last edited: Aug 25, 2005
  16. Dalek

    Dalek Registered Member

    Joined:
    Jun 12, 2005
    Posts:
    22
    Location:
    Nova Scotia
    I like the MVPS HOSTS file, easy to use and with Hoster easy to edit, you can also use MSAS Beta to edit the file. Always updated regularly. :D
     
  17. Trooper

    Trooper Registered Member

    Joined:
    Jan 26, 2005
    Posts:
    5,507
    I use Bluetack's. It's one of the best out there imho. Plus the Host Manager software they have is sweet. :D
     
Thread Status:
Not open for further replies.
  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.