2 ms·
If they're using DNS to resolve the name of the "mothership" just put a bogus record (or zone) in your DNS. If they're not using any name resolution protocol an
by EvanAnderson 11y ago
If they're using DNS to resolve the name of the "mothership" just put a bogus record (or zone) in your DNS. If they're not using any name resolution protocol and you can isolate the IP addresses they're talking to just blackhole them at your border.
- blackbeard 11y agoWe're already doing that but it's hard work keeping up with it all.
- a3n 11y agoAnd then Microsoft will fix that, ...
- EvanAnderson 11y agoDefault deny is the only viable strategy. (It's also completely impractical...)