Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

WinServer 08 firewall...

I'm connecting to a colocated box via hamachi's vpn - i'm hitting a specific IP on the server from a specific IP on the client and want to lock out all other RDC access.

Does this mean 2 separate rules - one to block all then one to open to the specific port?

share|improve this question
up vote 1 down vote accepted

You should always have a "deny all" default rule in your firewall. Thus if things aren't explicitly allowed, they will be denied. It would be a rare thing for a firewall to not have this rule configured by default, and if you don't then you need to create it.

Assuming that is the case, you need only open the appropriate ports to the appropriate IP. You don't have to also create deny rules for every other IP that might try to connect.

You should always test your firewall configuration with something like Shields Up (if it's on the public net) and/or nmap (which you run locally).

share|improve this answer

Assuming your firewall doesn't start with DENY ALL as it's default state, then yes, you'll need to do DENY ALL, and then ALLOW the particular IP address and port for the connection you want to make.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.