Re: Key loggers and others that communicate back to a base
Whit Blauvelt <[email protected]>
| Newsgroups | gmane.comp.security.firewalls.firehol.user |
|---|---|
| Message-ID | <[email protected]> |
To the degree it can set what types of services you can be a client of, yes. But if the key logger or whatever is using an HTTP(S) POST or GET to send your data across, and you allow HTTP(S) clients out over the firewall, you've still got trouble. You could allow only HTTP(S) clients to connect to specific IPs. For most of us, that would be a nonstarter. But if you wanted to have a system that could only connect to your bank, and your bank's at a fixed IP, you could easily do that. Whit On Tue, Sep 02, 2014 at 08:45:14PM +0100, Robin wrote: > I feel I need to install a firewall and ubuntu comes with a very simple one, > but I noticed it did not stop outgoing comms, or provide for a white list, > dealing with communications going from key loggers, zombie machines, etc. > Does firehol help in this regard? > > > _______________________________________________ > Firehol-support mailing list > [email protected] > http://lists.firehol.org/mailman/listinfo/firehol-support