Good point, Barry. I agree that blocking their C&C centers wouldn't do much good anyway. Outside of standard anti-virus, etc., probably the best thing one can do is keep the Astaro maintenance paid up so that IPS gets the newest pattern updates.
Rapt0r, I don't think there's a checkbox for RBN. Your best bet would seem to be to make sure that you are checking for exploits on all software you run behind the Astaro.
Thanks all of you. Yep its Notorious!! Russian Business Network. ASG HA units with 7.401. I have couple of the RBN IP but I'm not sure about their validity. I think Snort has RBN IP list, not quite sure. Some of my research sources has already penetrated their network, but still long too go to lock down the RBN in Production Network.
