Premium Security Feeds
It is increasingly difficult to insert malicious domains into the various lists and not all open source lists accept requests for insertion so, I believe that, it may be useful to provide subs premiums with a park of premium lists from reliable partners in order to guarantee greater security against any malicious domains
-
There's already the option to check against Google Safe Browsing API, which relies on Google's massive crawler network, and NRD blocking against a new domain. What kind of partners can beat those?
-
Martheen Martheen
Not enough, you need the lists of providers such as crowdstrike, cisco talos, fireye, mnemonic, ibm x force etc. etc.
Premium partners are required
-
-
you can activate OISD list which use a lot sources and works well beside NextDNS internal protections
-
DynamicNotSlow for your information I have asked the maintainer of the list several requests to add lists but it is not enough
-
-
You can also take a look at the Threat Intelligence Feeds the service uses from their GitHub Metadata
https://github.com/nextdns/metadata/blob/master/security/threat-intelligence-feeds.json
You can create an 'Issue' there if you have a feed to suggest
-
Loh if you check the requests, most of them are made in my name, but that's not enough
-
-
I'm sorry but, nrd, google safe browsing, threat intelligence feeds, dga protections and ad block lists are wayyyy more than enough, I don't know why adding more threat intelligence feeds will be sufficient because they will be burdens anyway, and I don't know what kind of browsing you do to have THIS much protection, if you want to have the best security, go get a reputable anti virus, VPN, and use rethinkdns since it has more blocklists. And don't ever browse unfamiliar websites and download sketchy programs and never let strangers access your PC no matter if it's your child, sibling, or parent and secure your devices with a 7 character password, that's the best you can get in terms of security, it's not about relying on someone else, you also need to learn on keeping yourself safe from malware
-
Siam Mehedi He wants the ultimate security and that's not bad to have but it's unnecessary. Like you said giants like Google can pour double or triple of those Premium services and that would still be a small cut. Them also analyzing all the sites shown on Google with their userbase makes them the biggest player and the most general user protection. While those Premium companies analyze mostly targeted attacks and specialized software / malware domains. Google has a huge library from everything. Ontop of all that AI-NRD-Threat Intelligence with a few reputable filters I now lowered mine to have 3 Adguard-OISD-Lightswitch that basically makes the protection extremely solid. The main point is that the Premium services are for businesses and their protection and their coverage is vastly different. Their users aren't going on random sites and downloading all type of stupid software like us. If someone honestly wants the ultimate protection blocking everything but allowing the ones he uses is honestly the only way because no matter the security level at some point something will get through.
-
Hey well if that's the case, then it's better to use enterprise grade dns like DNSFilter, other than using NextDNS or NextDNS integrates premium feeds in NextDNS Buisness plans
-
Siam Mehedi I don't get the whole business idea from his side and now from your side. I don't think that just because something is business oriented it's better. Business versions just have different options that are mostly used in businesses and so DNSFilter has a ton of analyzing options but it isn't just outright better at protecting your device. I'm more on the side of more users = more data and more raw data = more reports of sites. I honestly think with the right filters NextDNS would dominate things like DNSFilter. But yeah like you said if he truly thinks all the things already implemented aren't enough he would have to sacrifice so much to a point where using the web would be a pain. I'm also not trying to be rude to him but security is about what do you sacrifice for what % of security and if I can get 98%+ without it having a single impact on my browsing I'll take that happily going overboard for that possible 1-2% of malware that gets past the filters I don't know if that's worth it.
-
Hey yep, it's all about blocking most of malware, premium feeds on the other hand, is good for enterprise who handle a shit ton of sensitive info and to ensure dumbfounded employees don't download malware from seemingly real looking sites and let the malware hijack the server and ask for a ransom with will probably be a minimum of a 1000000 dollars, if he's a average Joe home user, he's just paranoid and dumb(no offense), if you want to be safe from malware and other unsafe things, just read my first comment on this thread.
-
