DNS Filter hosted DNS server

[PatG]

I have a split DNS system installed in my network.

My external DNS only serves DNS records for my 3 domains.

I have been receiving a lot of spurious DNS queries associated with DNS amplification attacks, which all get rejected by bind. However I would like to block these requests at the firewall rather than passing them to my externally facing DNS.

So what what I would like to do is:

[ul]

Allow queries to:[ul]

example1.com

example2.com

example3.com[/ul]

But block queries to any other domain.[/ul]

Any ideas?

Thanks,

Pat

[ede_pfau]

A custom IPS signature would be an option. No fancy stuff inside, just matching '^(dom1.com|dom2.com|dom3.com)'.

Actually, you could open a ticket an ask FTNT if they would help out with this.