Как обнаружить спам-бота в своей сети

Не будем говорить о том, что надо ограничивать права, блокировать трафик и применять прочие методы для того чтобы в вашей сети не заводились спам-боты. Так как все равно каждый день появляются уязвимости, а с ними и новые вирусы.

Но вначале я бы хотел обратить ваше внимание на такой замечательный ресурс как http://mxtoolbox.com/blacklists.aspx, который периодически будет производить проверку вашего IP на наличие в black list. И в случае, если ваш IP будет замечен,- пришлет “тревожное письмо”.

После этого возникнет вопрос какая машина заражена. Определить это очень просто. Просто приведу пример работы утилиты, которая должна быть на вооружении у каждого уважающего себя админа, а именно tcpdump. Естественно запускать tpcdump нужно на вашем шлюзе под управлением Linux

tcpdump -ni eth1 'tcp[tcpflags] & tcp-syn != 0 and dst port 25'

В моем примере eth1 – это интерфейс, который смотрит в локальную сеть.

Для шлюзов на основе Windows есть отличная тулза  Wireshark

26 комментариев к “Как обнаружить спам-бота в своей сети

  1. When I originally commented I clicked the -Inform me when brand-new remarks are added- checkbox as well as currently each time a comment is added I obtain 4 emails with the same remark. Is there any way you can remove me from that service? Many thanks!

  2. Can I simply claim what an alleviation to locate a person who actually understands what theyre speaking about on the web. You most definitely recognize exactly how to bring a problem to light and make it vital. Even more individuals need to read this and understand this side of the story. I cant think youre not much more prominent due to the fact that you definitely have the gift.

  3. An impressive share! I’ve just forwarded this onto a coworker who had been doing a little homework on this. And he in fact bought me breakfast because I stumbled upon it for him… lol. So allow me to reword this…. Thank YOU for the meal!! But yeah, thanks for spending some time to discuss this topic here on your web page.

  4. Oh my benefits! a remarkable write-up guy. Thank you However I am experiencing problem with ur rss. Don?t know why Unable to subscribe to it. Is there any person getting identical rss trouble? Any person that understands kindly respond. Thnkx

  5. An impressive share, I simply offered this onto a coworker that was doing a little evaluation on this. As well as he in fact acquired me morning meal since I discovered it for him. smile. So let me reword that: Thnx for the reward! However yeah Thnkx for spending the time to review this, I really feel highly about it and like reading more on this subject. If possible, as you come to be expertise, would certainly you mind updating your blog site with more information? It is very handy for me. Large thumb up for this article!

  6. Hello! I could have sworn I’ve visited this web site before but
    after browsing through many of the articles I realized it’s
    new to me. Anyhow, I’m definitely pleased I found it and I’ll be book-marking it and
    checking back often! cheap flights yynxznuh

  7. I was wondering if you ever considered changing the structure of your
    website? Its very well written; I love what youve got to say.
    But maybe you could a little more in the way of content so people
    could connect with it better. Youve got an awful lot
    of text for only having one or 2 pictures. Maybe you
    could space it out better?

  8. Excellent blog here! Also your site so much up fast!
    What web host are you using? Can I am getting your affiliate link
    in your host? I want my web site loaded up as quickly as yours lol cheap flights 3gqLYTc

  9. I really like your blog.. very nice colors & theme.
    Did you design this website yourself or did you hire someone to do it for you?
    Plz reply as I’m looking to create my own blog and would like to know where u got
    this from. thanks

  10. There are absolutely a lot of information like that to think about. That is an excellent indicate bring up. I offer the thoughts above as general motivation however clearly there are concerns like the one you raise where the most crucial thing will certainly be operating in honest good faith. I don?t understand if best techniques have actually arised around points like that, but I make sure that your work is clearly determined as an up for grabs. Both young boys and also women feel the influence of simply a moment?s satisfaction, for the remainder of their lives.

  11. An excellent share, I simply offered this onto an associate that was doing a little analysis on this. And he in fact acquired me breakfast since I located it for him. smile. So let me reword that: Thnx for the treat! However yeah Thnkx for investing the moment to review this, I feel highly concerning it as well as love finding out more on this subject. Preferably, as you become competence, would you mind upgrading your blog with even more information? It is very practical for me. Big thumb up for this article!

Оставить ответ

Ваш адрес email не будет опубликован. Обязательные поля помечены *