How to block IP address (NOT URL or UNC name)?

Interesting .... A first thought I am thinking of modifying local ARP tables. APK you got me into doing a GOOGLE on this one. **EDIT** Wouldnt it be easier just to mail you a PIX firewall :D **EDIT2** Scratch the ARP notion .... was hop...




Topic Options
#118469 - 01/12/03 06:27 AM How to block IP address (NOT URL or UNC name)?
DS3Circuit Offline
old hand

Registered: 12/11/02
Posts: 739
Loc: Northeast PA
Interesting ....


A first thought I am thinking of modifying local ARP tables.

APK you got me into doing a GOOGLE on this one.

**EDIT**

Wouldnt it be easier just to mail you a PIX firewall laugh

**EDIT2**

Scratch the ARP notion .... was hoping mapping a particular IP to the local NIC MAC would work ....

Top
Advertisement
#118491 - 01/12/03 05:30 PM Re: How to block IP address (NOT URL or UNC name)?
Jerry Atrik Offline
addict

Registered: 06/10/02
Posts: 694
in xp u can learn the firewall stuff
it's long and painfull but works quite well

ipsec policies can be reached from the gpedit.msc
the are tons of things u can do from there.
after creating or altering apolicy dont forget to "assign" it
or nothing will happen

Top
#118501 - 01/12/03 08:24 PM Re: How to block IP address (NOT URL or UNC name)?
DS3Circuit Offline
old hand

Registered: 12/11/02
Posts: 739
Loc: Northeast PA
A tutorial on blocking direct IP internet access through windows

http://www.pacificnet.net/~bbruce/route_intro.htm

Is this what you wanted?

Top
#118519 - 01/13/03 02:40 AM Re: How to block IP address (NOT URL or UNC name)?
DS3Circuit Offline
old hand

Registered: 12/11/02
Posts: 739
Loc: Northeast PA
Very Nice Jerry, that idea of using IPsec policies works .... and here's how you do it laugh

I will be using nd.edu as an example ... its a football thing laugh

Under Local Security Settings / IP Security Policies
1. Create a new IP Filter list
2. Source IP is My IP address
3. Destination (in this example) is 129.74.250.101 (nd.edu)
4. Protocol is any
5. Create a new IP Security Policy (use Kerberos 5 authentication)
6. Add an IP Security Rule (this rule is not a tunnel) (all network connections)
7. Add the new IP filter list that you just created. (require security)
8. Assign the new policy

Upon doing this I CAN go to http://www.nd.edu but I CANNOT go to http://129.74.250.101

Scripting can be done with this tool:
http://www.microsoft.com/windows2000/techinfo/reskit/tools/existing/ipsecpol-o.asp

I imagine this is what you were looking for APK?

Top
#118521 - 01/13/03 03:10 AM Re: How to block IP address (NOT URL or UNC name)?
DS3Circuit Offline
old hand

Registered: 12/11/02
Posts: 739
Loc: Northeast PA
Good glad to hear boss, and of course, feel free to add my name in lights anywhere you wish laugh

Top
#118525 - 01/13/03 04:21 AM Re: How to block IP address (NOT URL or UNC name)?
Jerry Atrik Offline
addict

Registered: 06/10/02
Posts: 694
thnx
the xp firewall is very good but a pain to configure (as u can see)

it looks like it worked out well

maybe dosfreak or someone can tell us how to automate or even save for the next install of xp
:x

btw this is what i did for a firewall before norton made an xp compatible one
laugh

Top
#118528 - 01/13/03 04:34 AM Re: How to block IP address (NOT URL or UNC name)?
DS3Circuit Offline
old hand

Registered: 12/11/02
Posts: 739
Loc: Northeast PA
Importing and Exporting Policies is seen here to save for a rainy day

http://www.microsoft.com/technet/treevie...PSEC_export.asp

And if you truly wished to have these installed automatically on the initial install of windows, you could use CMDLINES.TXT

These are far easier to maintain, manage, and deploy in a domain environment

*EDIT*
LOL .... APK was typing the answers at the same time I was ... woah

Top


Forums
Windows Support Forums
Everything New Technology
Legacy OS
Hardware
Software
Games
Networking
Customization & Tweaking
Security

Linux Support Forums
Everything Linux
Linux Hardware
Linux Software
Linux Games
Linux Networking
Linux Customization & Tweaking
Linux Security

Apple Support Forums
Everything Apple
Recent Topics
asking questions
by mukiduk
11/12/09 07:22 PM
AdvancedSystem Care 3.3
by Carey
11/08/09 02:56 PM
Primary Slave (HDD) not found
by cbk
11/07/09 12:51 PM
Novell to Windows Server 2008 Migration
by Myke
11/06/09 07:54 PM
about flightgear
by AKHILA1
11/05/09 12:06 PM
Who's Online
0 Registered (), 197 Guests and 46 Spiders online.
Key: Admin, Global Mod, Mod
Forum Stats
91163 Members
24 Forums
57463 Topics
187926 Posts

Max Online: 1079 @ 03/12/08 01:36 PM

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22