V Interesting article on usefulness of outbound filtering

Discussion in 'other firewalls' started by Joeythedude, Apr 21, 2009.

Thread Status:
Not open for further replies.
  1. Joeythedude

    Joeythedude Registered Member

    Joined:
    Apr 19, 2007
    Posts:
    519
  2. Stem

    Stem Firewall Expert

    Joined:
    Oct 5, 2005
    Posts:
    4,948
    Location:
    UK
    The outbound filtering for the services is good, just a case to remember to bind the service to the rule.
    I am just about to see how well it filters the returned packets.


    - Stem
     
  3. Nebulus

    Nebulus Registered Member

    Joined:
    Jan 20, 2007
    Posts:
    1,582
    Location:
    European Union
    The section about outbound filter from that article starts with the assumption that all malware will try to use sofisticated measures to connect with an outside server. This is not true in most cases, so even a simple outbound firewall with app control will successfully stop most malware.
     
  4. Joeythedude

    Joeythedude Registered Member

    Joined:
    Apr 19, 2007
    Posts:
    519
    Really ? I thought most outbound malware was quite smart ?
    I'm only starting on this part of security so ,that was just the impression I had.
    The last MBR rootkit is probably on my mind too though.
     
Thread Status:
Not open for further replies.