Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

I have been trying to make this work the last few hours but haven't come far.

I have a windows server 2008 and a set up Local Security Policy firewall yet "no" inbound rules (yet). My domains look like this:

Domain Profile: Inbound = block(default), Outbound = Allow(Default)
Private Profile: Inbound = block(default), Outbound = Allow(Default)
Private Profile: Inbound = block(default), Outbound = Allow(Default)

Pretty much default. Now what I want to accomplish is to block all ports except port 80, 443, 53 and a couple of others. In iptables ( on linux ) it is simply accomplished by setting up the ALLOW input rules for the ports and finally a DROP rule to block everything. Now what linux does is preferring an ALLOW rule over a DROP and from what I have understood, windows does not have this setting. So is there a way to mimic this feature?

share|improve this question
2  
No, that is not what Linux does. Oy. –  MikeyB Dec 18 '13 at 2:32

1 Answer 1

up vote 2 down vote accepted

What you want to do is modify your Firewall policy so that on an Untrusted (Public) network, the only allowed ports that come in are the ones that you've specified. Disable all other inbound rules.

Presumably your public interface is marked as such, yes?

If, on the other hand, it's sitting on a trusted internal network, you want to do the filtering at the network edge. It's still a good idea to disable inbound ports you don't use, however.

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.