I'm working with a friend who is having an issue with failed RDP hacking attempts eating up bandwidth on his server. His server is a Windows Server 2008 R2 box which is directly connected to the internet, using only the Windows firewall and no hardware device.
The server is only connected to the internet publicly with no local LAN connected.
Our solution to the RDP problem was to create a local loopback adapter on the computer and assign it a static IP address, then, to install RRAS & assign VPN clients addresses from a static pool in the same subnet as the loopback adapter. From here, we would only allow RDP access through the RRAS interface, rather than from the public adapter.
The VPN is working properly, but now when it comes to disabling the firewall for RRAS-connected clients, I can't seem to get the firewall to actually stop on the RRAS or loopback interface.
I've attempted disabling the firewall within the Windows Firewall with Advanced Security console by selecting properties from the root of the node, and disable for both the RRAS & loopback adapters.
Any ideas would be greatly appreciated.