Re: blocking IP ranges from querying tinydns

[John Levine <johnl@iecc.com>]

> I basically would like to either block Cyveillance or even better,
> return 127.0.0.1 for anything they query.

> Any ideas on how to accomplish this, other than adding a lo record to
>each of several thousand domains? I'd prefer a low-maintenance, global
>blocking solution.

a) adjust your router to reject traffic from them to port 53 on your
DNS server.

b) if your router is smart enough, do something NAT-like to route that
traffic to a different server that returns different results

c) everyone I know with a non-trivial set of domains to serve builds
the data files with scripts.  Adjusting those scripts to add the extra
records for split horizon should take about 15 minutes.

R's,
John