Home / News / How to

Own your DNS

DNS is a control plane of the Internet

No more ads, no more malware and more privacy if you own your DNS and enable DNS Security.

Free DNS Firewall (RPZ) feeds for registered users:

  • Malware Domain Blocklist by RiskAnalytics
  • Notracking - no more ads, tracking and other virtual garbage
  • PhishTank - phishing domains and IPs
  • etc

Powered by ioc2rpz

2023-01-17 ioc2rpz community feeds for AWS Route 53 DNS Firewall

I'm happy to announce a tight integration of ioc2rpz community portal with AWS Route 53 DNS Firewall.

With Route 53 Resolver DNS Firewall, you can filter and regulate outbound DNS traffic for your virtual private cloud (VPC). To do this, you create reusable collections of filtering rules in DNS Firewall rule groups, associate the rule groups to your VPC, and then monitor activity in DNS Firewall logs and metrics. Based on the activity, you can adjust the behavior of DNS Firewall accordingly.

ioc2rpz community provides OSINT based filtering rules via files on AWS S3. You will need to periodically update Route53 domain lists (e.g. with a lambda function).

The integration requires a subscription which is available on AWS Marketplace. There are 4 tiers: free, core (includes free), essentials (includes core), standard (includes essentials) with a minimal price tag (like a donation). 

What is ioc2rpz community?

ioc2rpz community is a portal which provides free of charge DNS Firewall (or Response Policy Zone) feeds. The DNS Firewall feeds are based on publicly available threat intelligence(TI). The TI feeds are maintained by 3rd party communities or companies and only a limited number of indicatores were whitelisted. We are not validating the TI feeds on false positives.

DNS Firewall feeds provided "as-is". They may contain false positives.

If you have any questions, comments, proposals or want to provide any feedback please contact us.

What is DNS Firewall?

DNS Firewall or DNS Response Policy Zones is a DNS server feature that allows to overlay custom information on top of the global DNS to provide alternate responses to DNS queries.
The prime motivation for creating this feature was to protect users from badness on the Internet related to known-malicious global identifiers such as host names, domain names, IP addresses, or nameservers.
Criminals tend to keep using the same identifiers until they are taken away from them. Unfortunately, the Internet security industry's ability to take down criminal infrastructure at domain registries, hosting providers or ISPs is not timely enough to be effective.
Using DNS Firewall, a network or DNS administrator can implement their own protection policies base based on reputation feeds from security service providers on a near-real-time basis.
More information available at dnsrpz.info


Supported by
* - wasn't tested with ioc2rpz.

Available DNS Firewall feeds

News | ioc2rpz technology | Terms & conditions | Support us | Contact us

Sign up

I accept the terms and conditions. Creating...Create

Sign in

Signing in...Sign in Forgot password?

Email confirmation

Confirming...Confirm

Restore password

Confirming...Confirm

Change password

Confirming...Confirm

Thank you for subscribing to ioc2rpz feeds!


Sign in/up on the community portal to access provisioning information on AWS Route53 Feeds page. Step by step instructions are available in the help. Sign in Sign up