Take the 2-minute tour ×
Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

We are currently going through a DDOS attack, and have outsourced DDOS mitigation to BlockDOS.net. Problem is they want me to block all port 80/443 traffic except from their IP address.

If I block all in the Windows Firewall Advanced Security, I can't override that with an allow.

How do I block everything but their IP for that one local IP address on Ports 80 and 443?

share|improve this question

1 Answer 1

up vote 4 down vote accepted

Windows firewall defaults to blocking inbound traffic. So remove all allow rules for inbound traffic on ports 80 and 443, then recreate a rule allowing traffic for the IP address you need.

Also, look into getting yourself a hardware firewall. A little part of me dies inside every time I see somebody making their server directly accessible on the internet without a firewall.

share|improve this answer
    
That is what I had thought... I had to then find the rule that was leaving the ports open. Thanks! –  Jeremy Boyd Sep 17 '11 at 21:06

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.