Take the 2-minute tour ×
Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

I have a Windows 2003 server that I want to block from accessing a specific IP address. I want to control this from the Server. because I control the machine. The traffic is http traffic (webservice call). It uses a non-standard port, so IP address+ Port combination would also work.

Background: I have a development enviornment that for some reason is ignoring host file enteries under some circumstances. These host files point the enviornment at services in another Dev enviornment. Wne th host files are ignored, dev is talking to production. This is not my question, rather the motivation for this inquiry.

I want is a failsafe to ensure dev will error instead of happily engaging in transactions with production. I control the dev server, I do not control the firewalls or the target production machine.

share|improve this question
    
Might be worth fixing the bigger problems of an ignored hosts file and the production server accepting stuff from dev. –  ceejayoz Nov 16 '11 at 16:57
1  
@ceejayoz I do need to address the larger issue, and I am working on this. I have no intention of leaving this problem as is. However, While I test and narrow down the problem, put together a coherent problem statement to owners of the firewall, I need to be sure my testing does not hit production. The information I have on this problem is vauge, and I would not pose the problem here, or to sysadmins in it's current state. Maybe the downvote is yours? Maybe you can you re-consider? –  brian chandley Nov 16 '11 at 17:31
    
Downvote isn't mine, sorry. I'll counteract it, though. –  ceejayoz Nov 16 '11 at 17:39
    
Thanks @ceejayoz –  brian chandley Nov 16 '11 at 19:16

1 Answer 1

up vote 6 down vote accepted

Add an outbound rule to your firewall specifying IP and port.

share|improve this answer
    
Thanks for your reply. Are we talking about on the Firewall on the server itself? I cannot locate these settings. The settings in Control Pannel >> Windows Firewall. –  brian chandley Nov 16 '11 at 17:01
    
I've not got a 2003 server to hand but they settings are usually inside the Server Manager application and look like this; windowsecurity.com/img/upl/image0021211893093934.jpg –  Chopper3 Nov 16 '11 at 17:17
    
I'm terribly sorry, but I've become so used to server 2008 that I'd forgotten that 2003 didn't have outbound rules - sorry about that. That said you CAN use 'IPSec' to do this but it's far more complex to do. –  Chopper3 Nov 16 '11 at 17:28
    
Thanks @Chopper3 I'll look into the posiblity of using IPSec. Thanks for confirming that windows 2003 does not support this natively. –  brian chandley Nov 16 '11 at 19:08

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.