public service - url filtering

Hello,

Can someone recommend a web site that publishes bad reputation URLs?
I'm looking for a list of URLs that are known to distribute malware.
I'm also looking for a such a list that is publicly available.

Thanks

sr
Shai [ Di, 29 Mai 2007 11:52 ] [ ID #1725746 ]

Re: public service - url filtering

On 29 May 2007 02:52:40 -0700, shai [at] cs.wisc.edu wrote:

>
>Hello,
>
>Can someone recommend a web site that publishes bad reputation URLs?
>I'm looking for a list of URLs that are known to distribute malware.
>I'm also looking for a such a list that is publicly available.

The first thing that comes to my mind is to use something like the MVPS
hosts file to get a list http://www.mvps.org/winhelp2002/hosts.htm . I
don't know of any site that creates a list of bad sites, per se, other than
something like "Site Advisor" http://www.siteadvisor.com/ , which you
actually have to know the site url before they will give you a report on
it. You can also get "bad domains" from IESpyAd
http://www.spywarewarrior.com/uiuc/resource.htm#IESPYAD , but you'll need
to parse through the RegEdit scripts to find them.
Default User [ Di, 29 Mai 2007 21:22 ] [ ID #1725749 ]

Re: public service - url filtering

On May 29, 9:52 pm, s... [at] cs.wisc.edu wrote:
> Hello,
>
> Can someone recommend a web site that publishes bad reputation URLs?
> I'm looking for a list of URLs that are known to distribute malware.
> I'm also looking for a such a list that is publicly available.
>
> Thanks
>
> sr

most anti-spyware/adware programmes have an option to protect your pc
from threats, this usually involves dumping thousands of sites into
your hosts file. spysweeper is one and spybot is another. You might
want to leech their lists.

Flamer.
flamer [ Mi, 30 Mai 2007 02:43 ] [ ID #1726624 ]

Re: public service - url filtering

We use SafeSquid, as proxy and application layer firewalling.
It has an option to query with in.dnsbl.org, to confirm that the url
that the users visit, do not belong to an unwanted domain. If a domain
is listed with dnsbl.org, access to that url is blocked.
The details are available at http://dnsbl.org/faq.php3

SafeSquid can also use the flat file categorised database, like from
urlblacklist.com, to block access to any of the 72 categories. You can
download the database once from
http://urlblacklist.com/cgi-bin/commercialdownload.pl?type=d ownload&file=bigblacklist
You need to register to get regular updates.
Sean [ Di, 12 Juni 2007 11:50 ] [ ID #1736350 ]
Miscellaneous » comp.security.firewalls » public service - url filtering

Vorheriges Thema: max no of portforward in DFL-700
Nächstes Thema: Security Risks of Firewire and PCMCIA DMA