[geeks] .hk, .cn, .info considered harmful

[Geoffrey S. Mendelson]

On Thu, Jun 05, 2008 at 08:32:19AM -0400, Phil Stracchino wrote:
> Everyone's probably seen the report by now, citing that in these three
> worst TLDs, as many as one site in ten carries a payload of malware.
> So, since the kids aren't good at paying attention to such things, I
> decided in the interest of safety to block all traffic to and from those
> TLDs at the firewall.
> 
> 
> Problem:  What netblocks to actually block.  I managed to find one site
> offering a list of .cn and .hk netblocks; the combined total is over
> 10k, gzipped.  There's got to be a better solution than that.

Are you running your own DNS server. If so you can add your own 
files to resolve those domains.

Geoff.
-- 
Geoffrey S. Mendelson, Jerusalem, Israel gsm at mendelson.com  N3OWJ/4X1GM