Sophos Firewall

Discussions how to block bots

Sophos Firewall requires membership for participation - click to join

Thread Info

State Not Answered
Locked Locked
Replies 2 replies
Subscribers 27 subscribers
Views 5309 views
Users 0 members are here

Options

Suggested

This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

how to block bots

TarekHalloun over 7 years ago

hello

i keep getting notification on my sophos xg and on openDNS about botnet

i scanned the computers with antiviruses , antimalwares , etc without any result

one of those computers is my domain controller and it has only DNS access to the internet

what can i do ?

This thread was automatically locked due to age.

Parents

0 rrosson over 7 years ago

Do you have logging of DNS requests enabled on your domain controller? Recommend that if you do not to enable it and on next alert from your XG firewall that you look through the logs to see which host on your network that is doing a DNS request for the domain/IP that is causing the event to fire in your XG. Hope this helps -Ron
Cancel
Vote Up 0 Vote Down

Cancel
0 TarekHalloun over 7 years ago in reply to rrosson

i enabled debugging logs in the dns server .. i will let it gather data until tomorrow then i will compare both
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 TarekHalloun over 7 years ago in reply to rrosson

i enabled debugging logs in the dns server .. i will let it gather data until tomorrow then i will compare both
Cancel
Vote Up 0 Vote Down

Cancel

Children

No Data