[?]block entire network ranges

Home | NewsGroups | Search | About

microsoft.public.windows.server.security

get this group's latest topics as an RSS feed

add this group's latest topics to your My MSN content

add this group's latest topics to your My Yahoo content

Subject

Author

Date

[?]block entire network ranges

unknown

10-14-2005

Re: [?]block entire network ranges

Joe Richards [M...

10-14-2005

Re: [?]block entire network ranges

Steven L Umbach

10-14-2005

Posted by unknown on October 14, 2005, 4:02 pm

Please log in for more thread options

How would you block entire network ranges under Windows Server 2k3 ?

--

************************************************************************

The Information contained in this E-Mail any of its attachments and any
subsequent correspondence is private and may contain proprietary or
legally privileged information intended solely for the intended
recipient(s). For those other than the recipient(s) any disclosure,
copying, distribution, or any action taken or omitted to be taken in
reliance on such information is prohibited and may be unlawful.
Accidental receipt of this information should be deleted promptly and
the sender notified.

This e-mail has been scanned for known viruses. However, no
warranty nor liability is implied in this respect.

*************************************************************************

Posted by Joe Richards [MVP] on October 14, 2005, 5:40 pm

Please log in for more thread options

I would use ipsec.

--
Joe Richards Microsoft MVP Windows Server Directory Services
www.joeware.net

unknown wrote:

> How would you block entire network ranges under Windows Server 2k3 ?

> --

> ************************************************************************

> The Information contained in this E-Mail any of its attachments and any

> subsequent correspondence is private and may contain proprietary or

> legally privileged information intended solely for the intended

> recipient(s). For those other than the recipient(s) any disclosure,

> copying, distribution, or any action taken or omitted to be taken in

> reliance on such information is prohibited and may be unlawful.

> Accidental receipt of this information should be deleted promptly and

> the sender notified.

> This e-mail has been scanned for known viruses. However, no

> warranty nor liability is implied in this respect.

> *************************************************************************

Posted by Steven L Umbach on October 14, 2005, 6:19 pm

Please log in for more thread options

Inbound, outbound, both?? The Windows Firewall starts off blocking
everything for inbound and you can define exceptions. With ipsec filtering
you can block inbound and outbound. Ipsec does not let you specify a network
range however - just IP addresses or a subnet. There are reasonably priced
software firewalls that like Sygate that will work on server that is very
flexible in configuration. I prefer a hardware device however and there are
low priced ones that can do a great job. Ebay has loads of used Netscreen
5XP for instance for around $100. The problem with relying on a
software/host firewall alone is that the firewall will stop if the service
for it stops for some reason. --- Steve