Blocking malicious sites at the Hosts (DNS) level

**DTravel** · May 5th, 2012, 07:30 PM

I brought this up in another thread and felt it was worth bringing to the attention of others not reading it.

The webpage http://someonewhocares.org/hosts/ is basically a set of instructions on how to modify your Hosts file (your PC's equivalent of a DNS) to block malicious sites (spam, trackers, that damn Jasmin live sex talk page, malware, etc.) and a very long list of suggested sites to block. I've been using this for many years without a problem and it has greatly improved my web surfing. The value of this versus Ad-blockers and anti-virii/malware software is this prevents your browser from ever even pinging these sites. They never see your PC. All the other stuff requires that these sites try to send something to your computer before they can act, which means there is always a (hopefully very slim) chance something will slip thru, either because your protection software doesn't have an update for the latest attack or can't react fast enough. It also reduces the demand on your internet connection since it prevents them from sending anything from your computer at all in response to a script or weblink. In effect, it removes those sites from the 'net as far as your computer is concerned. I hope it is of help to some others.

(Note for Mods: If this belongs in another thread, please accept my apologies and move it there. Thank you.)

befuddled · May 15th, 2012, 04:37 AM

Tossing this out in case it also is a help. I have used this site for a hosts blocking file for a couple years. It seems to be a pretty good one and is updated frequently. http://winhelp2002.mvps.org/hosts.htm

JohnsonJackson · May 15th, 2012, 05:20 AM

A few years back I used to use HOSTS to block sites on another PC running 98SE. Good stuff. Then, when I tried it with this here PC running win7, the text programs I tried got freaked out about the lack of file extension and made me re-locate the save location every single time I wanted to update the file. A real PITA, if I've made myself clear.

So i'm just half-assing it for now and using a FF siteblock extension. I definitely miss the HOSTS method, though... always made me feel like a power user.

**buttsie** · May 15th, 2012, 10:18 AM

An alternative to the outright hosts like those above is spybot search and destroy internal host list

I've tried about 3 different hosts programs and this was the least constricitive
by that I mean because I'm guarded like castle greyskull occasionally you might like to say I'll chance it but many hosts lists even with opt out/allow simplky still barred the site

I'm running ad-block-plus + no script add-ons with MSE anti-virus, HIPS threatfire & surf within sandboxie infections still occur but their negated easily

Spyblaster I keep updated if I ever need to use IE

I'm using windows XP SP3

Spybot - has a hosts list / immunize & removal facility
http://www.safer-networking.org/index2.html

If your not going to run sandbox then run an decent online scanner like ESET
One of the few that actually turns up stuff that super-antispyware & malwarebytes miss

RKILL from bleeping computer is priceless if you are truly infected as it will kill any malware processes and then allow you to run your amti-malware programs

I'd recommend you get all of your favoured security software together and burn it to disc
Serious infections have a habit of not allowing programs on the PC to be used at all

May 5th, 2012, 07:30 PM	#1
DTravel Lean Mean Screencap Machine Join Date: Apr 2008 Location: Better you don't know. Posts: 23,789 Thanks: 10,480 Thanked 207,205 Times in 23,697 Posts	Blocking malicious sites at the Hosts (DNS) level I brought this up in another thread and felt it was worth bringing to the attention of others not reading it. The webpage http://someonewhocares.org/hosts/ is basically a set of instructions on how to modify your Hosts file (your PC's equivalent of a DNS) to block malicious sites (spam, trackers, that damn Jasmin live sex talk page, malware, etc.) and a very long list of suggested sites to block. I've been using this for many years without a problem and it has greatly improved my web surfing. The value of this versus Ad-blockers and anti-virii/malware software is this prevents your browser from ever even pinging these sites. They never see your PC. All the other stuff requires that these sites try to send something to your computer before they can act, which means there is always a (hopefully very slim) chance something will slip thru, either because your protection software doesn't have an update for the latest attack or can't react fast enough. It also reduces the demand on your internet connection since it prevents them from sending anything from your computer at all in response to a script or weblink. In effect, it removes those sites from the 'net as far as your computer is concerned. I hope it is of help to some others. (Note for Mods: If this belongs in another thread, please accept my apologies and move it there. Thank you.) __________________ To view links or images in signatures your post count must be 0 or greater. You currently have 0 posts. To view links or images in signatures your post count must be 0 or greater. You currently have 0 posts. I rage and weep for my country. To view links or images in signatures your post count must be 0 or greater. You currently have 0 posts. To view links or images in signatures your post count must be 0 or greater. You currently have 0 posts. I can reup screencaps, other material might have been lost.

May 15th, 2012, 10:18 AM	#4
buttsie Porn Archeologist Join Date: Sep 2007 Location: earth Posts: 12,714 Thanks: 92,252 Thanked 241,291 Times in 12,746 Posts	An alternative to the outright hosts like those above is spybot search and destroy internal host list I've tried about 3 different hosts programs and this was the least constricitive by that I mean because I'm guarded like castle greyskull occasionally you might like to say I'll chance it but many hosts lists even with opt out/allow simplky still barred the site I'm running ad-block-plus + no script add-ons with MSE anti-virus, HIPS threatfire & surf within sandboxie infections still occur but their negated easily Spyblaster I keep updated if I ever need to use IE I'm using windows XP SP3 Spybot - has a hosts list / immunize & removal facility http://www.safer-networking.org/index2.html If your not going to run sandbox then run an decent online scanner like ESET One of the few that actually turns up stuff that super-antispyware & malwarebytes miss RKILL from bleeping computer is priceless if you are truly infected as it will kill any malware processes and then allow you to run your amti-malware programs I'd recommend you get all of your favoured security software together and burn it to disc Serious infections have a habit of not allowing programs on the PC to be used at all Last edited by buttsie; May 15th, 2012 at 10:21 AM.. Reason: adding comment

Thread Tools
Show Printable Version Email this Page
Display Modes
Linear Mode Switch to Hybrid Mode Switch to Threaded Mode

May 15th, 2012, 04:37 AM	#2
befuddled Senior Member Join Date: Sep 2009 Location: Roaming the Cosmos in search of life-filled planets to consume. Posts: 170 Thanks: 608 Thanked 1,076 Times in 168 Posts	Tossing this out in case it also is a help. I have used this site for a hosts blocking file for a couple years. It seems to be a pretty good one and is updated frequently. http://winhelp2002.mvps.org/hosts.htm

May 15th, 2012, 05:20 AM	#3
JohnsonJackson Member Join Date: Nov 2011 Posts: 40 Thanks: 192 Thanked 342 Times in 40 Posts	A few years back I used to use HOSTS to block sites on another PC running 98SE. Good stuff. Then, when I tried it with this here PC running win7, the text programs I tried got freaked out about the lack of file extension and made me re-locate the save location every single time I wanted to update the file. A real PITA, if I've made myself clear. So i'm just half-assing it for now and using a FF siteblock extension. I definitely miss the HOSTS method, though... always made me feel like a power user.