1 files changed, 15 insertions, 0 deletions

diff --git a/etc/disable-common.inc b/etc/disable-common.inc
index 6f9149dee..6ff83964d 100644
--- a/etc/disable-common.inc
+++ b/etc/disable-common.inc
@@ -469,3 +469,18 @@ blacklist ${HOME}/sent
 
 # kernel configuration
 blacklist /proc/config.gz
+
+# prevent DNS malware attempting to communicate with the server
+# using regular DNS tools
+blacklist ${PATH}/dig
+blacklist ${PATH}/kdig
+blacklist ${PATH}/nslookup
+blacklist ${PATH}/host
+blacklist ${PATH}/dlint
+blacklist ${PATH}/dnswalk
+blacklist ${PATH}/dns2tcp
+blacklist ${PATH}/iodine
+blacklist ${PATH}/knsupdate
+
+
+