Blocking a remote static IP in Windows 2000

From: Tom Geldner (tom@xor.cc)
Date: 08/17/01 

From: "Tom Geldner" <tom@xor.cc>
To: <focus-ms@securityfocus.com>
Subject: Blocking a remote static IP in Windows 2000
Date: Thu, 16 Aug 2001 19:38:08 -0700
Message-ID: <000201c126c5$a70fd510$0100a8c0@bosco>

I am running IIS 5 and Windows 2000 on a remote installation. The only
services available are http (80), ftp (21) and smtp (25) plus a 2nd
webserver on port 8080. This is a public machine.

What I would like to do is block a few problem static IPs from having
any access to any of the services. I am not using Ipsec and don't know
if it's even appropriate for this.

I'd like to keep this as simple as possible. Other options are using
Tiny Personal Firewall or Sygate but I'd rather not install them right
now since we're going to be going through a large software upgrade
shortly.

Help?

Tom

Relevant Pages

  • Re: Windows Update via NAT
    ... Datenbank dort auch beheimatet ist muss man bei der Installation nur ... nicht einen Konflikt mit dem Webserver auf diesem Port gibt. ... Geh mal bei dem betreffenden Client manuell an Windows Update. ...
    (microsoft.public.de.german.win2000.networking)
  • Re: What to use, what to use?
    ... > feel at home using a Win32 port of snort from silicon defence. ... > how one will perform as a webserver. ... just because you have a software firewall like Winproxy ... >> application for the Windows platform that has IDS with the firewall. ...
    (comp.security.firewalls)
  • Re: keeping ports open
    ... If a port is open, it means that 1) a software or service is running on your ... and 2) you're not using a firewall or your firewall isn't ... Use firewall software and hardware and antivirus software that is ... Follow the instructions for hardening Windows and IIS at ...
    (microsoft.public.security)
  • [Full-Disclosure] ron1n phone home, episode 4
    ... Hacking from Windows 3.x, 95 and NT ... Use secret Windows 95 DOS commands to track down and port surf computers ... Download hacker tools such as port scanners and password crackers designed ... Now you have the option of eight TCP/IP utilities to play with: telnet, ...
    (Full-Disclosure)
  • Re: How to Maintain an IIS Server?
    ... > server running on a Windows 2000 server. ... before a firewall and antivirus have been installed]. ... open ports; however, this will not identify which program is using the port. ...
    (microsoft.public.inetserver.iis.security)