> Could you explain further.
> - Where's the link from snort
> - "most" DNS systems, would this also include windows internal dns ??
its part of the 'bleeding SNORT' system - for those that like to live
on the bleeding edge :-)
specifically the 'blackhole DNS for spyware' link
the 'zones' file can be simply munged into whatever format you need. either
added to a BIND system, DNS proxy system or even turned into a plain
hosts.txt file (though if you are using a proxy server, then iirc, the Windows
box talks only to THAT and ignores DNS and hosts.txt (ie the proxy is the most
powerful way of doing control)