The Service Settings page in your DNSWatch account includes these settings:
Block DNS Resolution to Private IP Addresses
Specifies whether DNSWatch blocks responses for any domain names that resolve to IP addresses in the three private IP ranges reserved by the Internet Engineering Task Force (IETF). This option can help to protect your network from DNS rebinding attacks, which attempt to gain access to resources on your network that use private IP addresses. Domain names on the allowlist are not blocked by this setting.
Domain Sharing Policy
Controls whether DNSWatch users have the option to clear the Share this domain check box when they add domains to the Blocklist. This setting applies to all users in your DNSWatch account.
To change the Service Settings:
- Log in to your DNSWatch account.
- Select your user name and select Settings.
- Click Service Settings.
- To block DNS resolution to IP addresses in the specified private IP ranges, in the Block DNS Resolution to Private IP Addresses section, select the Enable on all networks check box.
- From the Domain Sharing Policy drop-down list, select one of these options:
Allow your team to decide whether to share manually added domains
Users can choose whether to select the Share this domain check box when they add domains to the Blocklist.
Always share manually added domains
Users cannot clear the Share this domain check box when they add domains to the Blocklist.
- Click Update Service Settings.
Manage DNSWatch Blocklist Domains