This talk presents Latvia’s journey from reactive cybersecurity response to proactive national protection through the creation of dnsmuris.lv - a free DNS firewall developed by CERT.LV (the national and governmental CSIRT of Latvia) and the .LV TLD registry NIC.LV. Born out of the need to tackle nationally targeted phishing campaigns and malicious websites, the firewall has grown from a pilot project into a national defense tool, now mandatory for all ISPs under Latvia’s National Cybersecurity Law.
We’ll explore how cross-sector collaboration with competent authorities enabled the integration of multiple RPZ feeds, how proactive threat intelligence is used to enrich blocking lists, and how feedback from end users and ISPs shaped its evolution. Finally, we’ll reflect on the impact this approach has had on improving cyber resilience - one DNS request at a time.