Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

Im trying to figure a way to only allow a certain net, I.e, to communicate with certain ports in Windows 2008 R2 Server. The server setup is pretty simple. A single NIC facing the Internet but also able to act as DHCP for VPN clients connecting to the server.

The only way I've had this working so far is to set a rule where I block all traffic from and This will leave a gap for my net, but surly there must be a better way to do this?


share|improve this question
up vote 0 down vote accepted

Don't think there's a tidy answer to this. The Windows firewall doesn't process rules in list-order, instead it processes the block rules and then the allow rules. You can specify an allow rule to override blocking, but it must be a secure connection. You could add an address range to all of the existing allow rules, but that will be a bit of a ball-bag, to use a technical term.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.