Assuming the clients are getting their DNS through WinGate's DNS server, it's quite easy to invalidate certain DNS records, and doing so will definitely reduce load caused by the viruses. If the client can not find the servers IP address using a DNS lookup, they will not know where to contact the server, so will not even create any requests to that server.
To invalidate certain DNS records:
- Navigate to C:\Windows\System32\Drivers\etc\ (or the relative path for your OS)
- Open the 'hosts' file in a text editor
- Append new lines to the hosts file for each DNS record to be invalidated, using the following format. It's important to note that www.domain.com and domain.com (without the preceding www) are seen as different DNS names, so an entry needs to be made for both variants.
- Code: Select all
0.0.0.0 www.domain.com
0.0.0.0 domain.com