A really simple set of tools to automate the generation of black hole Bind zones for known malicious hosts.

DNS black holing is a simple and effective way of preventing malicious traffic on your network. Usually this is done by maintaining a list of entries in your systems hosts file but you can easily protect a whole network in a single place by offloading the responsibility to a single Bind server.

All that's needed is to run the included install script:

./install.sh

The blackhole lists are created & updated by running the following:

./run.sh

This repo comes with a predefined set of host sources in sources.csv. This could easily be expanded with additional sources to suit your needs.

Distributed under the GNU General Public License v3.0 license. See LICENSE for more information.