Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

We are currently going through a DDOS attack, and have outsourced DDOS mitigation to Problem is they want me to block all port 80/443 traffic except from their IP address.

If I block all in the Windows Firewall Advanced Security, I can't override that with an allow.

How do I block everything but their IP for that one local IP address on Ports 80 and 443?

share|improve this question
up vote 4 down vote accepted

Windows firewall defaults to blocking inbound traffic. So remove all allow rules for inbound traffic on ports 80 and 443, then recreate a rule allowing traffic for the IP address you need.

Also, look into getting yourself a hardware firewall. A little part of me dies inside every time I see somebody making their server directly accessible on the internet without a firewall.

share|improve this answer
That is what I had thought... I had to then find the rule that was leaving the ports open. Thanks! – Jeremy Boyd Sep 17 '11 at 21:06

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.