Search: Home Bugtraq Vulnerabilities Mailing Lists Jobs Tools Vista
Focus on IDS
Name:
Email:
*Note: Email address will appear as "user domain ext" to prevent harvesting.
Subject:
Message:
 
RE: Single and Double flux DNS activity detection and prevention May 07 2008 04:08PM
Srinivasa Addepalli (srao intoto com)
I also would love to know if there are any methods which don't involve large
number of rules.

You are right that IPS DNS traffic performance goes down by the number of
domain name entries you have in the list. You can improve performance by
configuring IPS to use DFA (software or hardware).

You,...

[ more ]  





 

Privacy Statement
Copyright 2007, SecurityFocus