MalwareDomains.com (Full Version)

All Forums >> [ISA 2006 Misc.] >> ISA Firewall Tools



Message

fixitchris -> MalwareDomains.com (22.Apr.2008 9:02:30 PM)

Here is a tool to import the domains.txt from MalwareDomains.com

http://sync-io.net/ISATools.aspx

Enjoy.

Any feedback is welcome.
chris



fixitchris -> RE: MalwareDomains.com (4.May2008 11:34:21 AM)

ITENG:  This is the file http://www.malwaredomains.com/files/domains.txt
and yes it does work.

Domains.txt contains domain names only, such as BADDOMAIN.com.  I recommend you import the file as a DNS Set and include BADDOMAIN.COM AND *.BADDOMAIN.COM. 

With this setup you'll be creating a DNS set with over 40000 entries.  This does not seem to have an impact on ISA server.

chris



ITEngineer -> RE: MalwareDomains.com (4.May2008 11:53:46 AM)

Thank you chris.


also how about to do a GUI that would disable, enable rules remotely.

for example, i used to work in a school, where the teacher needs to enable the rule to be used by his student, once his lecture ends, he needs to disable the rule.

as an ISA admin, i dont wish to give admin access for every teacher, so to have a simple stand alone GUI that would enable disable rule(s) remotely is a wonderful solution.

I have plenty of ideas [:D] in my queue



fixitchris -> RE: MalwareDomains.com (4.May2008 12:12:23 PM)

You're welcome.

Let's continue the new idea here
http://forums.isaserver.org/m_2002066346/mpage_1/key_/tm.htm#2002066347



fixitchris -> RE: MalwareDomains.com (12.Jun.2008 12:59:47 PM)

You can now run this app as a scheduled job with no user intervention.

http://www.sync-io.net/Files/ISA_MalwareDomains_Binary.zip






elmajdal -> RE: MalwareDomains.com (12.Jun.2008 3:22:21 PM)

Hi Chris,

Cool !

I like it :)



fixitchris -> RE: MalwareDomains.com (8.Aug.2008 10:08:47 AM)

Running automatically with local user:

Add to scheduler with AT command to run below as SYSTEM

ntrights.exe -u isajobuser +r SeBatchLogonRight



Eng_A_Moktar -> RE: MalwareDomains.com (13.Aug.2008 7:02:34 PM)

it is a txt file , how 'd i import it ???



fixitchris -> RE: MalwareDomains.com (13.Aug.2008 8:58:11 PM)

Download and run http://www.sync-io.net/Files/ISA_MalwareDomains_Binary.zip

You tell the program whether you want to import as URL or DNS set, give it a name, specify a proxy (if needed), and execute.



Eng_A_Moktar -> RE: MalwareDomains.com (14.Aug.2008 9:05:52 AM)

thanx , i was hasty. i had to try it first , thanx again



ari.lehtimaki -> RE: MalwareDomains.com (27.Aug.2008 7:12:09 AM)

Is there any help file to the console version. How can I set the correct settings to the config file? I would like to set it to recieve updates say once a week.



fixitchris -> RE: MalwareDomains.com (27.Aug.2008 10:02:19 AM)

Running the Console as a scheduled task:

1. Run the GUI versoin, set your settings on-screen the way you want and click the Export button.

2. Run ISA_MalwareDomains_Console by passing it the config file created in the previous step (eg.  ISA_MalwareDomains_Console.exe "C:\White Space Dir\config.mdc"). The output is logged to MDC.log in the current folder.

You will have to create a scheduled task to run the Console on a schedule.  I recommend you use a limited user account.  If you do then you will need to use the AT command to run the following prior to running MalwareDomains Import:

ntrights.exe -u isajobUser +r SeBatchLogonRight

After the MalwareDomains update completes you should run

ntrights.exe -u isajobUser -r SeBatchLogonRight

(The reason for running these commands with AT is that they have to be executed SYSTEM)



ari.lehtimaki -> RE: MalwareDomains.com (2.Sep.2008 6:34:24 AM)

Works like a charm. Thanks!



nak -> RE: MalwareDomains.com (15.Sep.2008 1:47:19 PM)

I recently started having a problem with the ISA_MalwareDomains importer.  When I run it all seems to go well until I get this message -

"Cannot create a file when that file already exists.  The error occurred on object 'MalwareDomains' of class 'URL Set' in the scope of array 'servername'."

This occurs at about the point where it the GUI would transition from the  'Create URL/DNS Set' line to the 'Save URL/DNS Set' line.

Any advice on what may be going on?

Thanks,



fixitchris -> RE: MalwareDomains.com (15.Sep.2008 2:13:51 PM)

 
nak,
Please download latest build from http://sync-io.net/IsaTools.aspx

Refernce: http://forums.isaserver.org/MalwareDomains%25com_ISA_Import_fails%25/m_2002071089/tm.htm



nak -> RE: MalwareDomains.com (15.Sep.2008 2:42:27 PM)

That did it.  Thanks for the great tool and quick reply.  Sorry for the duplicate.  



anhptnn -> RE: MalwareDomains.com (22.Sep.2008 10:32:19 PM)

After I run this software, I could get domains.txt file with DNS set. When I tried to import into "Domain Name Set" of ISA. It appeared in an incorrect format.
Anybody could help me with this?
I don't know how to import image into forum.



fixitchris -> RE: MalwareDomains.com (23.Sep.2008 9:11:07 AM)

Please email all errors to chris@sync-io.net.  I will take care of it.



justmee -> RE: MalwareDomains.com (19.Oct.2008 7:21:59 AM)

Nice tool.[:)]



Page: [1]