Recommend DNS services to fight against malware

Discussion in 'other anti-malware software' started by Kernelwars, Aug 17, 2010.

Thread Status:
Not open for further replies.
  1. Kernelwars

    Kernelwars Registered Member

    Joined:
    Aug 12, 2010
    Posts:
    2,155
    Location:
    TX
    Hi guys,
    It would be of great help if you guys can suggest dns services for actively blocking malware sites and also recommend a free HIPS programo_O . Looking forward hearing from all the security conscious ppl here.
    Kernel
     
  2. AvinashR

    AvinashR Registered Member

    Joined:
    Dec 26, 2009
    Posts:
    2,060
    Location:
    New Delhi Metallo β-Lactamase 1
  3. reinwald

    reinwald Registered Member

    Joined:
    Apr 4, 2009
    Posts:
    54
    Location:
    Philippines
  4. Bambo

    Bambo Registered Member

    Joined:
    Dec 10, 2006
    Posts:
    194
    How much does it cost to make Opendns care for malware?

    I prefer DynDns Internet Guide http://www.dyndns.com/services/dynguide/ since it has control panel where you can whitelist sites, add categories like Opendns as well. No redirection crap either, can be turned off. Blocking is done by Barracuda http://www.barracudacentral.org/ and it seems pretty effective. Usually takes out many sites on most recent malware lists.
     
  5. blacknight

    blacknight Registered Member

    Joined:
    Sep 25, 2007
    Posts:
    2,433
    Location:
    Europe

    CIS, Online Armor Free.
     
  6. blacknight

    blacknight Registered Member

    Joined:
    Sep 25, 2007
    Posts:
    2,433
    Location:
    Europe

    If I understand, I can implement them in my firewall router ? No, I believe in an hw router without firewall. ( ? ) Used in the OS, do they use RAM ?
     
  7. Bambo

    Bambo Registered Member

    Joined:
    Dec 10, 2006
    Posts:
    194
    Dyndns? Works just like Opendns regarding setup. They also have tool for updating dynamic ip if not your router has in-build features. I don't know how well their software, Dyndns updater tool, works. I assume ok. Opendns offer DNS-O-Matic btw http://www.dnsomatic.com/ that take care of everything - and explains need for ip-control.

    But if you don't care for control panel, will not set up account then you don't need them to know your ip. Runs on default settings which will block malware.
     
  8. lordraiden

    lordraiden Registered Member

    Joined:
    Jan 30, 2006
    Posts:
    3,067
  9. Ibrad

    Ibrad Registered Member

    Joined:
    Dec 8, 2009
    Posts:
    1,949
    Clearcloud is what I will recommend

    By the way I see in your sig you are running Panda Cloud. Comodo may be causing a issue with PCAV. We know that the Comodo installer messes us the PCAV scanner just so you know.
     
  10. LODBROK

    LODBROK Guest

    Comodo is managed by UltraDNS (Neustar). UltraDNS's free service is dnsadvantage.

    Norton is managed by DynDNS which is their DynDNS Intenet Guide; fast and easy to customize; enterprise-class filtering from Barracuda - for free. I've been using that for a long time.

    Sunbelt seems to roll its own unless some one knows otherwise.

    OpenDNS is good but they have too much experimental stuff in their stew. I also understand their filtering is Google Safe Browsing which is rolled into and updated regularly in Firefox's urlclassifier3.sqlite (and Chrome??) so OpenDNS would just duplicate that effort. If you use Firefox.

    Another good tool: Gibson's dnsbench.

    Free HIPS: Spyware Terminator.
     
    Last edited by a moderator: Aug 18, 2010
  11. 0strodamus

    0strodamus Registered Member

    Joined:
    Aug 23, 2009
    Posts:
    1,047
    Location:
    United Surveillance States
    @Bambo / LODBROK: Thanks for the useful information regarding DynDNS vs. OpenDNS. Just switched to DynDNS from OpenDNS as DNS Benchmark gives me a faster response from both of their servers. :)
     
  12. Cvette

    Cvette Registered Member

    Joined:
    Apr 16, 2010
    Posts:
    373
    Location:
    South Carolina, USA
    Strange, when I select "add new network" with DynDNS, step 1 is "Select a Network" and it shows me nothing to select at all. Am I missing something?
     
  13. whitedragon551

    whitedragon551 Registered Member

    Joined:
    Sep 30, 2008
    Posts:
    3,188
    Location:
    USA
    Im using OpenDNS with filtering customized to block malware, gambling, fraudulent student sites, and Myspace.

    I tried DynDNS, but I think I overlooked something as I couldnt get it to work properly.
     
  14. funkydude

    funkydude Registered Member

    Joined:
    Apr 5, 2004
    Posts:
    6,852
    That's what I got. Bambo states redirects can be turned off which is why I was trying to figure out how, they redirect in its default state.
     
  15. Bambo

    Bambo Registered Member

    Joined:
    Dec 10, 2006
    Posts:
    194
    Ooops, I think DynDns requires DynDns domain address to insert "Network". I forgot I have one of those and that is the one being updated through router. So free Dyndns domain required to get free "network"/Internet Guide http://www.dyndns.com/services/dns/dyndns/ Punching in static IP not possible without paying up it seems.

    I don't think potential problems have much to do with a few ms from a benchmark program. What can mess up connection is for example Youtube thinking I live in London or wherever DynDns direct me. The way some servers deliver data is adjusted to where they think I am located. CDN delivery and Wikipedia can tell what that is :) or search opendns forum for "youtube slow", old problem and nothing to do about it. Also why it is good there are a few to chose from - assuming they have servers in different areas. I see it sometimes on Google Maps and Youtube. A few sites simply don't work, like deviantart.com where all graphics is gone! Normally I cannot tell difference to ISP dns-server, there is caching in router, Windows, pre-fetching of dns lookups in browser as well, but there can be minor problems. Pretty sure my ISP will beat Dyndns in any contest regarding latency but question is if I notice outside benchmark program.

    Does Opendsn really block malware. I know they talked and talked about for a long time but now it is a paid service right? Not even for private users with that price tag. Reason they hesitated were because it was risky to let users test such stuff and they needed to figure out safe procedures. That is BS. They needed to figure out a business plan... I would not mind paying up but not even possible as it is. According to comparison pdf only Opendns Enterprise blocks malware http://www.opendns.com/pdf/datasheets/opendns_product_comparison.pdf Opendns probably better with most other features. May be also better porn, gaming etc. blocking. There are of course different needs.
     
    Last edited: Aug 17, 2010
  16. Konata Izumi

    Konata Izumi Registered Member

    Joined:
    Nov 23, 2008
    Posts:
    1,544
  17. ExtremeGamerBR

    ExtremeGamerBR Registered Member

    Joined:
    Aug 3, 2010
    Posts:
    1,115
    Norton DNS is very good! :thumb:
     
  18. funkydude

    funkydude Registered Member

    Joined:
    Apr 5, 2004
    Posts:
    6,852
    Thanks bambo, that worked, now I can configure categories to block and turn off the redirect in DynDNS. I wonder if my router updater will work, let's give it a spin.
     
  19. Cvette

    Cvette Registered Member

    Joined:
    Apr 16, 2010
    Posts:
    373
    Location:
    South Carolina, USA
    Cheers Bambo, working here now too.
     
  20. Cvette

    Cvette Registered Member

    Joined:
    Apr 16, 2010
    Posts:
    373
    Location:
    South Carolina, USA
    Norton DNS's new configuration utility looks exactly like that of DynDNS. Glad they finished it though :)
     
  21. datarishik

    datarishik Registered Member

    Joined:
    May 11, 2010
    Posts:
    182
    I think Dyndns provides the same features as Opendns but the speeds could vary. Does anyone know the list of locations where Dyndns' servers are located?
     
  22. LODBROK

    LODBROK Guest

    @AlanMcAlan
    What new Norton DNS configuration utility is that? I looked around a bit and couldn't find it. :doubt:

    @ExtremeGamerBR & Konata Izumi
    Norton DNS is very good because DynDNS is very good! :D
     
  23. funkydude

    funkydude Registered Member

    Joined:
    Apr 5, 2004
    Posts:
    6,852
    LODBROK, it doesn't seem like you've properly used the tool. You're supposed to run the NameServer scan which takes about 30min first, it locates the closest servers to test out of nearly 5k servers.

    For me the top 20 or so are around the exact same performance, top ones for me include DynDNS, OpenDNS & UltraDNS, the rest are all ISP DNS servers.

    datarishik, I know there's 1 in London and 1 in the Netherlands. Not sure where the rest are.
     
  24. Kernelwars

    Kernelwars Registered Member

    Joined:
    Aug 12, 2010
    Posts:
    2,155
    Location:
    TX
    Thanks for mentioning about comodo... I have always tried staying away from it nothing personal its just a matter of trust issue..please dont quote me for that
    :doubt:
    Kernel
     
  25. cgeek

    cgeek Registered Member

    Joined:
    Mar 31, 2010
    Posts:
    328
    OpenDNS. Malware Defender or SSM for HIPS.
     
Loading...
Thread Status:
Not open for further replies.