Firewalls: Re: Restricting URL's

Firewalls
(November 1995)

Indexed By Thread: [Previous] [Next]

Subject:	Re: Restricting URL's
From:	Dermot Tynan <dtynan @ fws . ilo . dec . com>
Organization:	Digital Firewall Engineering
Date:	Thu, 9 Nov 1995 10:05:55 +0000 (GMT)
To:	mculver @ ncelec . com (Mike Culver)
Cc:	firewalls @ greatcircle . com
In-reply-to:	<9511082306 . AA27527 @ ncelec . com> from "Mike Culver" at Nov 8, 95 03:06:26 pm

Mike Culver wrote:
> 
> To deny resolution to sex.com, simply add an entry to named.boot for
> bogusns. This directive will tell your DNS that the name server for sex.com
> is bogus, and your DNS will never ask sex.com's DNS anything.

Nice idea, but...  Most of these one-host-wonder sites actually
use their ISP as a name server.  Disallowing the ISPs name server
is a bit drastic.  Look at playboy.com for example...
					- Der

prompt% whois playboy.com 
Playboy Enterprises (PLAYBOY-DOM)
   680 N. Lake Shore Drive
   Chicago, IL 60611

   Domain Name: PLAYBOY.COM

   Administrative Contact, Technical Contact, Zone Contact:
      Norton, Steve  (SN9)  steve @
 INTERACCESS .
 COM
      (708) 498-3842

   Record last updated on 14-Feb-94.
   Record created on 14-Feb-94.

   Domain servers in listed order:

   MAILHOST.INTERACCESS.COM     198.80.0.6
   BACKUP.INTERACCESS.COM       198.80.0.11

-- 
Dermot Tynan						+353 91 754608
dtynan @
 ilo .
 dec .
 com					 DTN: 822-4608

Digital Equipment International BV, Galway, Ireland

References:

Restricting URL's
From: Mike Culver <mculver @ ncelec . com>

Indexed By Date	Previous:	Re: fairly recent web server compromise... From: Dermot Tynan <dtynan @ fws . ilo . dec . com>
Indexed By Date	Next:	Re: security policy From: "Johnson-Bryden, Ian" <IJB @ saicuk . co . uk>
Indexed By Thread	Previous:	Restricting URL's From: Mike Culver <mculver @ ncelec . com>
Indexed By Thread	Next:	Re: Restricting URL's From: gdonl @ gv . ssi1 . com (Don Lewis)