I have a linux run as firewall between my PC and the Internet router.
Now, if my Windows PC is infected with Banking Trojan that will eavesdropping any online banking activities and redirect traffics to the attacker control center.
Let say I have an account with Citibank and I know the Citibank online banking web address IP address. Now I go to the firewall and run a script that DENY all connection except Citibank IP address. I even has Citibank web address and IP set in my windows hosts file.
If I make an online transaction on Citibank website, that will send a Transaction Authentication Number through SMS to confirm the transaction.
In such case, am I safe from Men-in-The-Middle attack with such restricted firewall setting?