Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

Can the Windows Firewall in Windows Server be used to block connections from a specific IP address?

share|improve this question
    
Please expand on the reason and application. –  tomjedrz May 5 '10 at 18:26
    
Seems clear enough to me although I did ask for more specific info. –  tomjedrz May 8 '10 at 0:10
add comment

closed as not a real question by Massimo, Zypher, Helvick, Warner, MattB May 5 '10 at 19:10

It's difficult to tell what is being asked here. This question is ambiguous, vague, incomplete, overly broad, or rhetorical and cannot be reasonably answered in its current form. For help clarifying this question so that it can be reopened, visit the help center.If this question can be reworded to fit the rules in the help center, please edit the question.

3 Answers

up vote 2 down vote accepted

On Windows 7, the Firewall control panel allows the creation of very specific rules through the "Advanced Settings". On the Inbound Rule tab, there is a New Rule wizard, and IP addresses can be specified in the scope section and "block" specified as the action to take. A rule to block all incoming connections from a specific IP address or range is possible.

On Windows XP, the Firewall control panel allows the blocking on incoming requests from specific programs, and each program can have the block only for a certain IP range (via the "scope" button on the dialog to add a program). With a bit more specific info I imagine it can be configured to do what blocking you need.

I don't know which Windows Firewall is on Windows Server 2008.

share|improve this answer
2  
The Firewall on 2008 is the same as Vista (with a few minor differences); Just as 2008 R2 is basically the same as Win7. –  Chris S May 5 '10 at 19:08
    
I scrupulously avoided Vista, so I couldn't address it! –  tomjedrz May 8 '10 at 0:12
add comment

Yes, it indeed does.

share|improve this answer
2  
+1, 2008: Open the Firewall Snap-In, right click Inbound Rules, Add rule. Custom. All Programs. Any protocol type. Specify the remote IP(s). Block Connection. Next, name it, Finish. 2003 is more difficult, it's easiest to block everything by default and allow known good IPs in. –  Chris S May 5 '10 at 19:07
add comment

The Windows Firewall on Windows Server 2003 does not give you options to create IP-specific rules. The firewall on Server 2008 has been updated to allow blocking by IP. You CAN do this using the IP Security Policy snap-in for MMC, however, in Server 2003.

Open MMC and add the "IP Security Policy" snap-in and create a new policy. You will need to create an IP list which contains the addresses you want to block, and an action list to specify the block action. Add a new policy rule which uses the IP list and the block action list, then activate (assign) it. The addresses on the policy list will then be blocked from connecting to the server.

This web site also has a good overview of the process: http://www.windowsitpro.com/article/ip-security-ipsec2/ipsec-packet-filtering.aspx

share|improve this answer
1  
-1, You can definitely create a rule in the Windows Firewall where a remote IP is specified. You can also block by range, and certain pre-defined sets. IP Security Policy will also accomplish this, but it not the first place everyone is going to look. –  Chris S May 5 '10 at 19:00
    
The firewall on Windows Server 2003 does not give this option. Apparently the firewall on Server 2008 has been updated to allow this. –  Justin Scott May 10 '10 at 17:39
add comment

Not the answer you're looking for? Browse other questions tagged or ask your own question.