Hi,

> Could you explain further.
> - Where's the link from snort
> - "most" DNS systems, would this also include windows internal dns ??

its part of the 'bleeding SNORT' system - for those that like to live 
on the bleeding edge :-)

http://www.bleedingsnort.com/staticpages/index.php?page=bleeding-projects

specifically the 'blackhole DNS for spyware' link

http://www.bleedingsnort.com/blackhole-dns/files/


the 'zones' file can be simply munged into whatever format you need. either
added to a BIND system, DNS proxy system or even turned into a plain
hosts.txt file (though if you are using a proxy server, then iirc, the Windows
box talks only to THAT and ignores DNS and hosts.txt  (ie the proxy is the most
powerful way of doing control)

alan