See: http://urlquery.net/report.php?id=638938 See the IDS alert explained here: https://lists.emergingthreats.net/pipermail/emerging-sigs/2011-September/015925.html and here: http://www.cloudshield.com/blog/dns-security-expert-series/blocking-dns-covert-channel-attacks/ link article author = ROBERT WHITTENBERG Status: failure: <urlopen error [Errno -2] Name or service not known
polonus