EFW Support

Support => General Support => Topic started by: GiovanniPanx on Wednesday 05 February 2014, 09:45:24 pm



Title: How to block external ip?
Post by: GiovanniPanx on Wednesday 05 February 2014, 09:45:24 pm
Hi folks
I open a port forwarding for RDP (port 3389) in order to connect, from external, to my server.
I noticed, checking event viewer, a lot of chinese ip are attempting to connect my server using random users and pass.

Now, I wanna block these IP (I have a list).

Someone tells me how to set the fw to block any attempt to input a list of IP?
Endian community 2.5.1

Thank you in advance


Title: Re: How to block external ip?
Post by: GiovanniPanx on Thursday 06 February 2014, 07:12:31 pm
Nobody??

It's so hard to block an IP with an Endian Firewall?????


Title: Re: How to block external ip?
Post by: dda on Friday 07 February 2014, 01:05:37 am
Haven't tried it but it looks like the firewall section then incoming routed traffic, source would be the IP addresses that you have, destination would be green then policy would be deny.


Title: Re: How to block external ip?
Post by: GiovanniPanx on Friday 07 February 2014, 07:43:04 pm
Hi dda

thank you for your replay.
I tried creating a port forwarding rule entering my IP list and asking to stop forwarding to the IP of my server.
Unfortunately this way stops any forwarding.

Any idea?


Title: Re: How to block external ip?
Post by: dda on Tuesday 11 February 2014, 01:31:54 am
If I were you i would create a VPN to secure your traffic.  If you have windows server its pretty easy.
 Is the IP you are connecting from fixed? 
The method I gave you will block all traffic from those IPs. 
I actually got into Endian after a hack by the Chinese so I know your pain.  They are quite persistent.