Справочник Пользователя для SonicWALL 5.8.1

The Botnet Filtering feature allows administrators to block connections to or from Botnet 
command and control servers.
 

To configure Botnet filtering, perform the following steps:

Enable Block connections to/from Botnet Command and Control Servers to block all 
servers that are designated as Botnet servers. Use the exclusion list below to exclude 
approved IP addresses.

Select one of the two modes of Botnet Filtering:

All: All connections to and from the specified countries are blocked.

Firewall Rule-Based: Only connections that match an access rule configured on the 
appliance will be blocked.

Select Enable logging to log Botnet Filter-related events.

Optionally, you can configure an exclusion list to all connections to approved IP addresses. 
To do so, go to the Botnet Exclusion Object pulldown menu and select an address object 
or address group.

If you believe that a certain address is marked as a botnet incorrectly, or if you believe an 
address should be marked as a botnet, report this issue at the SonicWALL Botnet IP Status 
Lookup tool at: