Block ransomware Cryptolocker

[jrosa]

i need to block ransomware Cryptolocker, i have the pfsense 2.26 squid and pfblocker

best regards

[NOYB]

Think we all do.

A good practice is backups stored for a sufficient period of time that will ensure at least one is prior to any ransomware infiltration.

[jrosa]

but i know some backups are afected by crytolocker

[muswellhillbilly]

You can always try blocking EXE downloads in Squid. Though perhaps a more elegant solution would be to use Fans guardian for the blocks. You can ban file extensions of certain types but bypass the block for specific sites, such as McAfee or Microsoft.

[NOYB]

@jrosa:

but i know some backups are afected by crytolocker

That's why I said this:
@NOYB:

. . . stored for a sufficient period of time that will ensure at least one is prior to any ransomware infiltration.