Include Malware Domains from URLHaus
Please include the malware domains identified by URLHaus. The majority of these domains are known to host ransomware payloads. (See https://www.zdnet.com/article/security-researchers-take-down-100000-malware-sites-over-the-last-ten-months/). It appears that the domains contained in their RW_DOMBL domain blocklist are already included, but the domains contained in the DNS Response Policy Zone (RPZ) and the domains contained in their Plain-Text URL List (URLs only) are not.
Query Log Custom Column
Should give the ability to customize visible columns (i.e. Host IP, Policy) without needing to export
Proxy websites not blocked
All these domains allow proxy connections to bypass the filter. As you can see the categories are wrong or don't include the proxy/bypass category. It seems like whatever AI you're using should look for the term "proxy" in the URL and on the page and auto-categorize. www.proxyvideos.com Parked Sites & Domains proxyvideos.com Parked Sites & Domains video-proxy.com Parked Sites & Domains www.hidebux.com Information Technology kproxy.com Information Technology www.hidemyass-freeproxy.com unblockvideo.net Information Technology freevideoproxy.com Business
Add blocked site to blacklist via email
example workflow: DNSFilter allows me to pick a unique email address @ a subdomain of yours, for instance [email protected] (I would be able to change the first portion as needed). I send an email to [email protected] with a website link in it. DNSFilter works some magic and that site is added to my blacklist posthaste.
Would like to have an integration with Syncro so when we add customers, it will automatically add the customer in the DNSFilter dashboard. Further, pass alerts to Syncro as tickets.
Look at adding Doppelgänger for threat tab to block similar domains. See attached graphic
Roaming client - optional alternative port
For security, we block port 53 on our firewall except for the local dns server.. If the roaming client could use an alternative port, this would work for us.
Ability to Add Blocklists via URL
Would be useful to have the ability to import custom blocklists (and whitelists) from URLs (for example the ones listed here: https://firebog.net) and have them refresh at a given interval. This would allow for more fine grained control over ad-blocking etc.