[prev in list] [next in list] [prev in thread] [next in thread] 

List:       bleeding-sigs
Subject:    Re: [Bleeding-sigs] Blackhole DNS/Snort in the browser
From:       David Glosser <david_glosser () yahoo ! com>
Date:       2007-10-22 15:39:38
Message-ID: 389346.32870.qm () web52409 ! mail ! re2 ! yahoo ! com
[Download RAW message or body]

[Attachment #2 (multipart/alternative)]


Awesome! Will this also work with IP addresses (we have a separate IP list, which is \
not as well maintained) or only domains?   
----- Original Message ----
From: Jim McQuaid <jim@jamesmcquaid.com>
To: bleeding-sigs@bleedingthreats.net
Sent: Monday, October 22, 2007 12:18:39 AM
Subject: [Bleeding-sigs] Blackhole DNS/Snort in the browser

Firekeeper is an implementation of Snort in the
browser.  We are currently testing with high success
utilizing Bleeding's Blackhole DNS.

To Implement:
1. Download BlackholeForFirekeeper.txt from
http://docs.bleedingthreats.net/bin/view/Main/SnortConfSamples
2. Install the Firekeeper for Firefox from
http://firekeeper.mozdev.org/
3. reboot your computer,
4. open Firefox, click the Tools pulldown menu, and
click Firekeeper,
5. click Blacklist in the left window pane,
6. open BlackholeForFirekeeper.txt, select all, and
copy,
7. right click in Firekeeper's right window pane, and
left click paste,
8. click the Save button,
9. close Firekeeper-0.2.14 and reboot your computer.

Subsequently test against tickle.com and other
domains, by attempting to navigate to them.  We would
like to extend this functionality against Storm. 
Please jump in here and contribute your imagination.

Thank you,

James


_______________________________________________
Bleeding-sigs mailing list
Bleeding-sigs@bleedingthreats.net
http://lists.bleedingthreats.net/cgi-bin/mailman/listinfo/bleeding-sigs


[Attachment #5 (text/html)]

<html><head><style type="text/css"><!-- DIV {margin:0px;} \
--></style></head><body><div style="font-family:arial, helvetica, \
sans-serif;font-size:10pt"><DIV style="FONT-SIZE: 10pt; FONT-FAMILY: arial, \
helvetica, sans-serif">Awesome! Will this also work with IP addresses (we have a \
separate IP list, which is not as well maintained) or only domains? </DIV> <DIV \
style="FONT-SIZE: 10pt; FONT-FAMILY: arial, helvetica, sans-serif">&nbsp;</DIV> <DIV \
style="FONT-SIZE: 12pt; FONT-FAMILY: times new roman, new york, times, serif">----- \
Original Message ----<BR>From: Jim McQuaid &lt;jim@jamesmcquaid.com&gt;<BR>To: \
bleeding-sigs@bleedingthreats.net<BR>Sent: Monday, October 22, 2007 12:18:39 \
AM<BR>Subject: [Bleeding-sigs] Blackhole DNS/Snort in the browser<BR><BR>Firekeeper \
is an implementation of Snort in the<BR>browser.&nbsp; We are currently testing with \
high success<BR>utilizing Bleeding's Blackhole DNS.<BR><BR>To Implement:<BR>1. \
Download BlackholeForFirekeeper.txt from<BR><A \
href="http://docs.bleedingthreats.net/bin/view/Main/SnortConfSamples" \
target=_blank>http://docs.bleedingthreats.net/bin/view/Main/SnortConfSamples</A><BR>2. \
Install the Firekeeper for Firefox from<BR><A href="http://firekeeper.mozdev.org/" \
target=_blank>http://firekeeper.mozdev.org/</A><BR>3. reboot your computer,<BR>4. \
open Firefox, click the Tools pulldown menu, and<BR>click Firekeeper,<BR>5. click \
Blacklist in the left  window pane,<BR>6. open BlackholeForFirekeeper.txt, select \
all, and<BR>copy,<BR>7. right click in Firekeeper's right window pane, and<BR>left \
click paste,<BR>8. click the Save button,<BR>9. close Firekeeper-0.2.14 and reboot \
your computer.<BR><BR>Subsequently test against <A href="http://tickle.com/" \
target=_blank>tickle.com</A> and other<BR>domains, by attempting to navigate to \
them.&nbsp; We would<BR>like to extend this functionality against Storm. <BR>Please \
jump in here and contribute your imagination.<BR><BR>Thank \
you,<BR><BR>James<BR><BR><BR>_______________________________________________<BR>Bleeding-sigs \
mailing list<BR><A href="mailto:Bleeding-sigs@bleedingthreats.net" \
ymailto="mailto:Bleeding-sigs@bleedingthreats.net">Bleeding-sigs@bleedingthreats.net</A><BR><A \
href="http://lists.bleedingthreats.net/cgi-bin/mailman/listinfo/bleeding-sigs" \
target=_blank>http://lists.bleedingthreats.net/cgi-bin/mailman/listinfo/bleeding-sigs</A><BR></DIV>
 <DIV style="FONT-SIZE: 10pt; FONT-FAMILY: arial, helvetica, \
sans-serif"><BR></DIV></div></body></html>



_______________________________________________
Bleeding-sigs mailing list
Bleeding-sigs@bleedingthreats.net
http://lists.bleedingthreats.net/cgi-bin/mailman/listinfo/bleeding-sigs


[prev in list] [next in list] [prev in thread] [next in thread] 

Configure | About | News | Add a list | Sponsored by KoreLogic