Guest smitty Posted July 1, 2015 Report Share Posted July 1, 2015 Hello All I am desperately looking for some direction. I have a Mandriva box with two network cards. One for loc and one for net. Every now and then and it is adhoc we are getting listed on CBL with the following description: This IP is infected (or NATting for a computer that is infected) with the Conficker A or Conficker B botnet. It is referring to IP 220.127.116.11 Is there in which I can block any and all traffic to this IP using shorewall? I have squid, postfix, shorewall in place. Apparently according to CBL it uses port 80, here we have a transparent proxy in use. Could anyone please help me out. Have battled for two weeks. Thank you Smitty Quote Link to comment Share on other sites More sharing options...
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.
Note: Your post will require moderator approval before it will be visible.