K-12 Forums

Talk with other K-12 network administrators in your state.

Or see all states.

Categories

Vanilla 1.1.4 is a product of Lussumo. More Information: Documentation, Community Support.

This discussion has been inactive for longer than 30 days, and is thus closed.
    • CommentAuthortimb_nz
    • CommentTimeApr 3rd 2009
     permalink
    Why can I vote something to be Malware, but I can't choose Malware as a category when submitting a domain?

    I just came across a malware site, but there's nothing that I can do about it on OpenDNS.

    When voting on categories some sites are "Malware", but I can't choose that for a new site that I want to submit.
    • CommentAuthorrotblitz
    • CommentTimeApr 3rd 2009 edited
     permalink
    It seems to me that only moderators can tag domains as malware. Normal users just can vote. You may want to open a ticket in order to get your domains tagged.
    http://www.opendns.com/support/contact/
  1.  permalink
    A lot of people are sticking these in the Ad Ware category. Less than ideal, but that's what is happening.
    • CommentAuthortimb_nz
    • CommentTimeApr 11th 2009
     permalink
    Very much less than ideal...
    • CommentAuthorhsskc
    • CommentTimeApr 22nd 2009
     permalink
    Are there actually any sites marked as "approved" under the malware category? If so are all approved malware sites automatically blocked for all opendns users?
    • CommentAuthorrotblitz
    • CommentTimeApr 22nd 2009
     permalink
    "Are there actually any sites marked as "approved" under the malware category?"
    Yes, there are.

    "If so are all approved malware sites automatically blocked for all opendns users?"
    No, you must have category Malware checked for blocking on your OpenDNS dashboard.
    • CommentAuthorhsskc
    • CommentTimeApr 22nd 2009
     permalink
    The category Malware is not listed as an available option to check for blocking in my dashboard.
  2.  permalink
    Advanced options.

    Malware and phishing filters are on by default unless you so choose to disable them. Currently, malware blocking is limited to black-holing Conficker domain requests.
    • CommentAuthorhsskc
    • CommentTimeApr 23rd 2009
     permalink
    @maintenance
    I'm a little unclear on your response...

    Looking under advanced settings I see a section called Botnet Protection. Is this what is needed to be checked to enable blocking of Malware sites?

    And am I to understand that if a site is approved in the Malware category that it will only be blocked if it is a Conficker domain?
  3.  permalink
    Botnet protection is what you are looking for, yes.

    As this feature is still being developed, the only thing currently being blocked are the domains that Conficker creates to "phone home", once a system is already infected. There is currently no other form of malware protection, regardless as to what may have been tagged as a malware domain, AFAIK. That is still a "forward-looking" tagging category, which will be implemented when OpenDNS feels it is ready.

    Currently, the blocking of Conficker domains has noting at all to do with domain tagging, and everything to do with reverse engineering Conficker, and black-holing all possible domains it might create and use to phone home.

    You can check the blog for posts relating to Conficker:
    http://blog.opendns.com/
    Thankful People: hsskc

This discussion has been inactive for longer than 30 days, and is thus closed.