Policies — DNS Daddy Demo

Standard

Malware, phishing, command & control and cryptomining blocked.

default1 network assigned

Blocked categories

MalwareDomains distributing malicious payloads or hosting exploit kits.PhishingCredential harvesting and brand-impersonation domains.C2 / BotnetCommand-and-control infrastructure that compromised devices call home to.CryptominingMining pools and in-browser cryptojacking scripts.Newly registeredDomains registered in the last 30 days, heavily over-represented in attacks.Ads & trackingAdvertising and telemetry endpoints.Adult contentDomains serving adult material.GamblingBetting and casino domains.

When blocking, answer withLog individual queries

Always allow (one domain per line)Always block (one domain per line)

Assigned to: Office LAN

Restricted

Threat categories plus newly registered domains. Intended for IoT devices that should only talk to a short list of hosts.

1 network assigned

Blocked categories

When blocking, answer withLog individual queries

Always allow (one domain per line)Always block (one domain per line)

Assigned to: Lab

Guest

Threat categories plus advertising and adult content for untrusted devices.

1 network assigned

Blocked categories

When blocking, answer withLog individual queries

Always allow (one domain per line)Always block (one domain per line)

Assigned to: Guest Wi-Fi

Monitoring only

Nothing is blocked. Queries are logged and scored so behaviour can be observed before enforcement.

0 networks assigned

Blocked categories

When blocking, answer withLog individual queries

Always allow (one domain per line)Always block (one domain per line)

Assigned to: no networks

Add a policy

Starts from the default threat categories.