Skip to content
Notis

Check existing DNS rules against abuse intelligence

Start a review when you need it. Notis can list a profile's custom rules, check available threat intelligence, and report rules connected to known abuse indicators.

Trigger

Webhook received

Notis starts this workflow when an external tool or custom backend sends an HTTP request.

Action

List Custom Rules for Profile

Why this helps

Custom DNS rules can become stale, while threat intelligence changes elsewhere and is easy to overlook during routine policy maintenance.

  • Review existing rules in context of current threat information.
  • Get a focused list of rules that merit human review.
  • Avoid changing policy based on an unverified match.

Setup

Build it in a few focused steps.

  • 1Connect Abuselpdb and Control D once in Notis.
  • 2Create an automation in Notis and name the Control D profile to review.
  • 3Tell Notis to list the profile's custom rules, compare their hostnames with available Abuselpdb threat intelligence, and report possible matches for review.
  • 4Pick a webhook trigger and choose where run reports should go.
  • 5Test with one real profile whose custom rules you can verify.

Questions about this workflow

Does the audit delete or modify rules?

No. It lists custom rules and reports possible matches. Review the report before making policy changes.

Which rules does it inspect?

The workflow uses the profile's custom rules. If you need a particular folder reviewed, name it in your instruction and confirm the profile and folder details.

Will every match be a confirmed threat?

A match is a review lead based on returned information, not proof by itself. Check the source evidence before changing DNS policy.

When this happens · Trigger

Do this · Action

Supported Triggers and Actions

Notis builds workflows that link Abuselpdb to Control d. A trigger fires from one place; an action lands in another.

Abuselpdb triggers

Control d actions

Recurring trigger

Notis starts this workflow on a schedule, such as daily, weekly, or during business hours.

TriggerScheduled

Delete Device by ID

Permanently deletes a device, breaking DNS resolution on gadgets using its resolvers.

ActionInstant

Webhook trigger

Notis starts this workflow when an external tool or custom backend sends an HTTP request.

TriggerInstant

Delete Profile

Permanently deletes a profile only if no devices enforce it; assigned profiles cannot be deleted.

ActionInstant

Delete Profile Rule by Rule ID

Delete a custom DNS filtering rule from a profile.

ActionInstant

Delete Rule from Folder

Permanently deletes a custom DNS rule from a profile folder.

ActionInstant

Delete Profile Schedule

Delete a schedule from a profile.

ActionInstant

List Known Access IPs

List recent IP addresses used to query a device.

ActionInstant

Get Analytics Endpoints

Lists available analytics regions and their endpoints.

ActionInstant

Get Analytics Levels

Lists the available analytics levels for devices.

ActionInstant

Connect any two apps with Notis in the middle.

Abuselpdb and Control d, or any other combination from 1,000+ integrations.

When this happens · Trigger

Do this · Action

Save your first hour today.

7-day trial of any paid plan, with 20$ of usage included.
No card. Works with personal or business Control d.