QUARANTINING AN INTERNET PROTOCOL ADDRESS

摘要

Method(s) and a Domain Name Server (DNS) for quarantining an IP address of a computing device are described. The DNS may implement method(s) that include receiving a request at the DNS and analyzing the request based on a pre-defined set of rules. The IP address of the computing device may be quarantined by the DNS and a quarantine mode may be triggered. In the quarantine mode, restricted services may be provided by the DNS. Further the method includes providing a response corresponding to the request to the computing device. The response available in the cache can either be an expired response or an unexpired response based on a Time to Live of the response. If the response is not available, then the method includes abstaining from providing the response corresponding to the request. The abstaining may include not performing a recursive search for accessing the response corresponding to the request.

主权项

1. A method for quarantining an Internet Protocol (IP) address corresponding to a computing device, the method comprising,
receiving, at a Domain Name Server (DNS), a request from the computing device, quarantining, by the DNS, the IP address corresponding to the computing device by analyzing the request based on a pre-defined set of rules, to trigger a quarantine mode, wherein restricted services are provided to the computing device in the quarantine mode, providing, by the DNS, in the quarantine mode, a response corresponding to the request, if the response is available in a cache, wherein the response is one of an expired response and an unexpired response based on a Time to Live (TTL) of the response; and abstaining, by the DNS, in the quarantine mode, from providing the response corresponding to the request, if the response is not available in the cache, wherein the abstaining comprises not performing a recursive search for accessing the response corresponding to the request.