blocking access to server based on ip range

[sudiphans]

hai,
can any one tell me how to block range of ipadresss from accessing my file server.
my server is of windows 2003 server

 

[Neeraj J]

Hi Sudhiphans,

Simplest is to subnet/create separate VLAN's. Or you can add IPSec filter through MMC console and add snap-in called "IP Security Policy Management" select local computer. Edit the rules section & under Security Rule wizard filter ICMP or IP traffic as Allow or Deny.
You can configure this via your firewall or can install software firewall in your server (but it will create mess of approvals, if server is in production zone). So first method is quite cool as it doesn't require any software installation or network modifications.

 

[sudiphans]

hai neeraj,
there is no option to select a ip range in ipsecurity in server 2003
there is only option of dns, subnet, and specific ip address

 

[Neeraj J]

Dear Sudhiphans,

You can't give IP range directly but can mentioned subnet for that IP range if it helps you. Anyways, i am using Windows 2008 R2 version so this can be achieved by using advance feature of Windows Firewall alone. Otherwise stick to Comodo Personal firewall or ZoneAlarm Free firewall2012

 

[sudiphans]

thanks neeraj