Quote:
Originally Posted by ai-danno
I don't think that can be emphasized enough- one of the best ways to catch an infiltration on your network is to see (and obviously block) the callbacks bot/root kits and viruses make.
The first week I turned on outbound filtering in our hosting network we caught a slew of infected machines that had passed our other means of detection.
Plus, it's part of being a good netizen- don't pass your infection on to others.
|
can you expand upon your reply a little more as they pertain to detecting
unwanted bots, viruses etc.!