I have configured the Windows Firewall to
Block (default) incoming connection on the public profile.
I have created a rule for a port (in this case, this is Sql Server) that explicitly states that only my office static IP is allowed.
If I test from my office, I am able to connect to the port. I was expecting that anybody outside the office would not be able to connect, but this is not the case. I asked a friend to telnet the port to see if it would reply and it does even if he's not on my network.
I am a bit confuse here. Shouldn't it block everybody but the given IP? Is my server completely unsecured?
The server is a dedicated Windows 2008 R2.
Note, I am a programmer which, by a turn of event, now has to manage this server. It is basically hosting our intranet and the database behing it.
As requested, this is the complete list of active rules in the firewall