• RSS
  • Twitter
  • FaceBook

Welcome to ISAserver.org

Forums | Register | Login | My Profile | Inbox | RSS RSS icon | My Subscription | My Forums | Address Book | Member List | Search | FAQ | Ticket List | Log Out

blocking IP addresses

Users viewing this topic: none

Logged in as: Guest
  Printable Version
All Forums >> [ISA Server 2000 Firewall] >> Firewall Client >> blocking IP addresses Page: [1]
Login
Message << Older Topic   Newer Topic >>
blocking IP addresses - 31.Dec.2001 8:31:00 AM   
spittingfire

 

Posts: 24
Joined: 31.Dec.2001
Status: offline
Hi All,

Just a quick question - Can the firewall block specific IP addresses? If yes how do I do it?

Thanks

Post #: 1
RE: blocking IP addresses - 31.Dec.2001 2:24:00 PM   
spouseele

 

Posts: 12830
Joined: 1.Jun.2001
From: Belgium
Status: offline
Hi,

of course ISA could do that ;-)

Can you be more specific what has to be blocked: from some IP's (client sets) are to some IP's (destination sets).

For more info goto http://www.isaserver.org/pages/learning%20zone.htm and buy Tom's book (highly recommended).

Hope this helps...
Stefaan


(in reply to spittingfire)
Post #: 2
RE: blocking IP addresses - 31.Dec.2001 3:55:00 PM   
spittingfire

 

Posts: 24
Joined: 31.Dec.2001
Status: offline
Let's say for instance I want to block a specific user that has a static IP address from an ISP from viewing my website - how would I stop that IP address or can I?

(in reply to spittingfire)
Post #: 3
RE: blocking IP addresses - 2.Jan.2002 1:12:00 PM   
spouseele

 

Posts: 12830
Joined: 1.Jun.2001
From: Belgium
Status: offline
Hi Spittingfire,

is this an academic question ? ;-)
I really don't see what you want to achieve with denying access to your website for only one ip-address out of the whole Internet.

To answer your question: I've no docs are ISA at hand at the moment, but are you publishing the webserver? In that case you can restrict the client address set in the Client type properties (I think). If you are using a treehomed DMZ scenario, then you'll have to restrict access in your packet filters.

Hope this helps...
Stefaan

[This message has been edited by spouseele (edited 02 January 2002).]


(in reply to spittingfire)
Post #: 4
RE: blocking IP addresses - 2.Jan.2002 7:43:00 PM   
spittingfire

 

Posts: 24
Joined: 31.Dec.2001
Status: offline
To be quite honest I don't want to block an IP address from accessing my website - What I really wanted to know is if there is a way to block a specific IP address that has port scanned your machine and drop those packets. I remember seeing somewhere that this can be done but don't remember where I saw it. All I want to know is how do I do that?

(in reply to spittingfire)
Post #: 5
RE: blocking IP addresses - 3.Jan.2002 12:18:00 AM   
spouseele

 

Posts: 12830
Joined: 1.Jun.2001
From: Belgium
Status: offline
Hi,

OK, now I understand... ;-)
I think you are referring to the following article: http://www.isaserver.org/ubb/Forum2/HTML/002837.html.

The concept is to create a blocking packet filter.

Hope this helps,
Stefaan


(in reply to spittingfire)
Post #: 6
RE: blocking IP addresses - 3.Jan.2002 12:33:00 AM   
spittingfire

 

Posts: 24
Joined: 31.Dec.2001
Status: offline
I tried the link but it is not working.

(in reply to spittingfire)
Post #: 7
RE: blocking IP addresses - 3.Jan.2002 12:39:00 AM   
spouseele

 

Posts: 12830
Joined: 1.Jun.2001
From: Belgium
Status: offline
Hi,
http://www.isaserver.org/ubb/Forum2/HTML/002837.html

PS: without trailing dot!

Stefaan


(in reply to spittingfire)
Post #: 8
RE: blocking IP addresses - 3.Jan.2002 12:45:00 AM   
spittingfire

 

Posts: 24
Joined: 31.Dec.2001
Status: offline
got the link to work - thanks

Sorry for bothering you with all the questions - all I need to do is basically copy and paste the info and create a .vbs file. I guess I'll have to delete the ">" sign. Is there anything else I need to edit within the script to make it work?


(in reply to spittingfire)
Post #: 9
RE: blocking IP addresses - 3.Jan.2002 12:58:00 AM   
spouseele

 

Posts: 12830
Joined: 1.Jun.2001
From: Belgium
Status: offline
Hi Spittingfire,

I'll have to pass... I'm not a programmer or a VB scripter, but a network engineer. However, I understand what the functionality of the script is ;-)

As Tom suggested, "I suppose you can explore the SDK and maybe figure out how this works".

Of course, you can always create manualy the packet filter todo the job. But then the process is *not* automated.

Greetings,
Stefaan


(in reply to spittingfire)
Post #: 10
RE: blocking IP addresses - 3.Jan.2002 1:41:00 AM   
spittingfire

 

Posts: 24
Joined: 31.Dec.2001
Status: offline
Thanks for all of your help. I'll take a look at all the information..

Once again thanks


(in reply to spittingfire)
Post #: 11

Page:   [1] << Older Topic    Newer Topic >>
All Forums >> [ISA Server 2000 Firewall] >> Firewall Client >> blocking IP addresses Page: [1]
Jump to:

New Messages No New Messages
Hot Topic w/ New Messages Hot Topic w/o New Messages
Locked w/ New Messages Locked w/o New Messages
 Post New Thread
 Reply to Message
 Post New Poll
 Submit Vote
 Delete My Own Post
 Delete My Own Thread
 Rate Posts