2
votes
2answers
84 views

Securing Windows Firewall connections for Windows Server 2012

I have Windows Server 2012 at Amazon EC2 in non-domain environment. I need to remote desktop into it and also connect to Microsoft SQL server instance running on it. In addition to opening these ...
1
vote
1answer
146 views

A Windows Filtering Platform filter has been changed - File and Printer Sharing

My Windows 2008 R2 server gets hammered tons of login attempts. I guess somebody is running a Brute Force attack. Funny enough our MySQL configuration file got deleted last night, so they must have ...
0
votes
2answers
126 views

firewall inbound rule for rdp port

I have added an inbound rule for port 3389 to allow rdp access only for certain remote ip's. Even after doing so, i am able to rd my server from an ip that is not added in the rule. Please guide me ...
2
votes
2answers
2k views

Configure Windows Firewall to block all except for specific traffic

I'm trying to configure Windows Firewall on Server 2008 R2 to block everything except for the traffic that I add to the rule list. I see there are three policies - public/private/domain. I've been ...
3
votes
1answer
178 views

Windows Firewall IPSec configuration, how to protect the AD

Here's my infrastructure configuration: All servers have public IP I've setup a GPO to enable IPSec on everyone of them with a "require for inbound and request for outbound" rule, for all server, ...
0
votes
1answer
175 views

Windows Server 2008 R2 Security Log repeated Audit Failure Entries

We seem to be getting a huge load of entries in our security log with the following details: The Windows Filtering Platform has blocked a connection. The source IP address and port change for each ...
3
votes
1answer
1k views

How do you disable “stealth mode” on Windows Server 2008?

After reading this article and this one I've decided to change all our firewalls to reject instead of block packets in most cases. My experience corroborates the arguments these articles make. ...
0
votes
1answer
163 views

Rule to block IP address not working

Looking at my Event Log I see that right now an attempt is being made at brute forcing my 'sa' user for Sql Server on my Windows Server web edition box. I know that firewall rules are not the only ...
0
votes
1answer
842 views

How to enable connection security for WMI firewall rules when using VAMT 2.0?

I want to use VAMT 2.0 to install product keys and active software in remote machines. Everything works fine as long as the ASync-In, DCOM-In, and WMI-In Windows Firewall rules are enabled and the ...
0
votes
2answers
798 views

Large number of security events in the log

About a week ago we moved the application from one server to another (from Windows Server 2008 to Windows Server 2008 R2, different DCs, but same company). There are 12 websites on this server, but ...
3
votes
2answers
4k views

What firewall ports need to be open for Active Directory?

I want to run DFS replication between a couple of servers. It's my understanding that the servers need to be part of a domain for this. Being able to give people a username and password that works on ...
0
votes
2answers
153 views

FTP, Windows server 2008 r2, windows firewall problems

Okay so Google is letting me down just due to the sheer volume of stuff related but not specific to my problem that I could find. I have a c# program that connects to various ftp sites and downloads ...
4
votes
3answers
3k views

Is the firewall on Windows Server 2008 R2 sufficient?

I'm planning a few servers to be run on Rackspace cloud. Aside from using load balancers to control the flow of web traffic, how good is the Windows Firewall? I'm thinking in terms of throughput as ...
0
votes
1answer
111 views

Blocking an IP range on Windows server 2008

How to define a rule in Windows server 2008 firewall to be applied to an IP range. For example blocking IPs which start with 202 I mean all IPs which meet 202...* There are two options when creating ...
1
vote
4answers
137 views

Do I need a hardware firewall for Win 2003?

We have had a Win 2003 server at a co-lo for a while. It is used as a web server and has a very cheap hardware firewall between it and the internet. Ports 3389 and 80 are the only ones forwarded to ...
6
votes
2answers
4k views

Whats the difference between local and remote addresses in 2008 firewall address

In the firewall advanced security manager/Inbound rules/rule property/scope tab you have two sections to specify local ip addresses and remote ip addresses. What makes an address qualify as a local ...
-1
votes
2answers
1k views

Fail2ban for Windows 7?

My server is getting hit pretty hard by (what appears to be) script kiddies in China. I'm just looking for some thoughts/ideas on how to potentially setup some type of Fail2ban proc?
0
votes
3answers
824 views

Windows Server 2008 Firewall: Do inbound rules override outbound rules?

I have in inbound rule to allow all communication with MyApp.exe I have an outbound rule to block all traffic to 192.168.0.88 Can MyApp.exe communicate with 192.168.0.88 - I don't understand which ...