Block IP Via Windows Server

[archangel1969]

Removed

 

[N3ktar]

thanks! does the IP blocking using this method affects my virtual machine centos? i wan to block my globalmgrsvr port from specific IPs, i tried to do that (using iptables) from virtual machine centos but won't let me login anymore.

help is appreciated.

 

[alfa206]

nice guide

 

[allocen]

good work man,very usefull tutorial ,its a good defense against the hackers

 

[N3ktar]

thanks! does the IP blocking using this method affects my virtual machine centos? i wan to block my globalmgrsvr port from specific IPs, i tried to do that (using iptables) from virtual machine centos but won't let me login anymore.

help is appreciated.

can anyone please help? i want to restrict globalmgrsvr port from specific IPs, i tried doing this in the virtual machince centos using iptables but it won't let me login if do that.

thank you.

 

[Alphakilo23]

Please notice that this isn't considered best practice for Windows Vista / Windows Server 2008 and above.
If you happen to use a newer version of Windows, make use of the built-in "Windows Firewall with Advanced Security".

Inb4 "lolol its a secrty thingy from m$, it sucks!":
It does it's job quite good, comparing to most "l33t" security solutions out there.
Also, it's quite intuitive to manage.

Say, you want to block incoming traffic for port 38170 (Cabal Manager, "Broadcast Port") except for one IP (in this example "

To view the content, you need to sign in or register

"):

1. Run WF.msc
2. Select "Inbound Rules"
3. Click on "New Rule..."
4. Select "Port" and click next
5. Select "TCP" and "Specific local ports", type 38170 into the textbox and click next
6. Select "Allow the connection"
7. Select the network profiles wich you want to apply the rule on
8. Enter a name and a description and click "Finish"
9. Now right click the new created rule and click on "Properties"
10. Open the tab "Scope", and select "These IP addresses" under "Remote IP adress"
11. Click "Add"
12. Select "This IP adress or subnet", and type in the IP adress or subnet you want (for the local machine it's 127.0.0.1, or the subnet 127.0.0.0/8 if you want to do it exactly)
13. Click "Ok", and "Ok" again and you're done.

Now everyone except for the IP you specified will get a TCP RST when trying to connect to the port.

 

[balmungx30]

theres a way to block ip directly from cabal you need to use the function dbo.inet_addr. if you dont know it use search button

 

[Ratko]

I would personally use zone alarm pro
You can easily use the functions of it and its UI is user friendly ;D