Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

We have a Windows Server 2003 R2 Machine here at work that I need to ensure is accessible only from specific set of IP Addresses. The Server is on a LAN and I am aware that one of the possible solutions maybe limit access to the Server's VLAN. However that is not feasible at the moment.

I've been searching for a firewall that could do this, Windows' Firewall is pretty limited and I don't see an option in it to limit incoming data based on Source IP addresses.

Most free firewalls like Comodo and ZoneAlarm don't work on Windows Server.

Any ideas on how to accomplish this would be of great help.

Thanks in advance.

share|improve this question

closed as not constructive by HopelessN00b, pauska, Chris McKeown, John Gardeniers, gWaldo Oct 2 '12 at 10:32

As it currently stands, this question is not a good fit for our Q&A format. We expect answers to be supported by facts, references, or expertise, but this question will likely solicit debate, arguments, polling, or extended discussion. If you feel that this question can be improved and possibly reopened, visit the help center for guidance.If this question can be reworded to fit the rules in the help center, please edit the question.

Windows Firewall comes with Server 2003. Use it.

The Scope option is probably what you're looking for. Allow [blah] on scope [your LAN], deny everything else.

share|improve this answer
That didn't work, the server is not on a domain. To create an Inbound Port Rule on Windows Server 2003, i need to use the Group Policy Management feature, which in turn requires that I login using a domain account. Any other ideas? – user139281 Oct 2 '12 at 9:05
The server does not need to be on a domain to manage the firewall - although I see how you came to that conclusion with the second link. You can specify inbound port/program rules in the Control Panel -> Windows Firewall -> Exceptions tab, and when adding the exception you can use the Change Scope button to choose where the exception applies to. – Chris McKeown Oct 2 '12 at 9:13

Not the answer you're looking for? Browse other questions tagged or ask your own question.