SANS Live Training is Available In-Person OR Live Online! Explore Upcoming Events.


To attend this webcast, login to your SANS Account or create your Account.

This webcast has been archived. To view the webcast login into your SANS Portal Account or create an account by clicking the "Get Registered" button on the right. Once you register, you can download the presentation slides below.

Spamhaus DNS Firewall ( DNS RPZ ) - DNS as a 'Critical Choke Point' to Block Resolution of Known Malicious Sites

  • Thursday, November 02, 2017 at 10:30 AM EST (2017-11-02 14:30:00 UTC)
  • Matt Stith


  • SecurityZONES

You can now attend the webcast using your mobile device!



Threat Intelligence on known malicious sites (malware, ransomware, bots, etc) is packaged into data Zones, which are consumed by a DNS resolver to block access to known malicious sources on the internet. Fast, timely updates (every 1 minute) enable an advanced layer of protection for all users, all applications, and all protocols. 

A highly effective and critical choke point against ongoing attacks such as ransomware and malware, RPZ blocks both incoming and outgoing malicious sources from entering a network.

Join Matt Stith, Product Manager for Deteque (a division of Spamhaus), who will outline Spamhaus' 18+ year track record as a trusted third party and provider of threat intelligence used by companies worldwide to protect their users and networks from malicious threats. In addition, he will present a real life case study demonstrating how Response Policy Zones (RPZ) intelligence blocks threats and chokes botnet activity, plus the practical steps you can make to setup and begin using RPZ to protect your DNS infrastructure from malicious parties.

Speaker Bio

Matt Stith

Matt Stith is the product manager for Spamhaus Technology's Response Policy Zones and related products. Matt is a 9 year veteran in the internet anti-abuse industry with his time at Rackspace Hosting working on the Acceptable Use Team. In addition to his anti-abuse work at Rackspace he assisted the legal department with Law Enforcement requests and testimony. He also is currently serving on the M3AAWG board of directors as vice chairman.

Need Help? Visit our FAQ page or email

Not able to attend a SANS webcast? All Webcasts are archived so you may view and listen at a time convenient to your schedule. View our webcast archive and access webcast recordings/PDF slides.