> The report also contains a pretty useless firewall rule

For what it's worth Yara is not a firewall. It's essentially an intelligent grep for incident response. An IOC is an indicator of compromise, so it's after the fact not a preventative measure.

http://virustotal.github.io/yara/