Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

How to define a rule in Windows server 2008 firewall to be applied to an IP range. For example blocking IPs which start with 202 I mean all IPs which meet 202...*

There are two options when creating a new rule:

  1. This IP address or subset:

  2. This IP address range:

How should I define such a wide range ?

share|improve this question

migrated from Nov 9 '11 at 1:28

This question came from our site for computer enthusiasts and power users.

That is the range between to I assume that you mean IPv4. – soandos Aug 2 '11 at 17:23
I'd first ask the question, "why are you blocking all those IPs in the first place?" A blanket answer wouldn't fit here, nor would it be beneficial to you in the long term. – surfasb Aug 2 '11 at 17:24
Yes I mean IP v4. I was wondering if this wide range has a negative performance issue or not. – Xaqron Aug 2 '11 at 17:25
up vote 0 down vote accepted

The range begins at and ends at You can also represent it as

Why /8?

An IPv4 address is a 32-digit binary number that has been conveniently divided into 4 groups. The address expressed in binary is

11001010 00000000 00000000 00000000

In this context /8 means "match the first 8 binary digits", or any address that begins with 202..

Read all about it at the Wikipedia article for Classless Inter-Domain Routing.

share|improve this answer
Why ? What does 8 mean here ? – Xaqron Aug 2 '11 at 17:54
@Xaqron I updated my answer to address your question. – William Jackson Aug 2 '11 at 18:28

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.