Was thinking about how to block an incoming c&c commands. Outgoing is easy if you know the address
A semi automated is the use of blacklist blocks. Someone set a mechanism like this on my router (edgerouter)
If you know the ip address or url, you can use 2 different mechanism. One as mentioned on sn would be a incoming nat rerouting.
the other would be use the firewall. Here is an example for one ip address
A semi automated is the use of blacklist blocks. Someone set a mechanism like this on my router (edgerouter)
If you know the ip address or url, you can use 2 different mechanism. One as mentioned on sn would be a incoming nat rerouting.
the other would be use the firewall. Here is an example for one ip address
