Take the 2-minute tour ×
Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

Our web server is Windows Web Server 2008 R2. I added a new rule in Windows Firewall with Advanced Security Inbound rules.

I have successfully created a rule to block all IP addresses to access port number 1433 to our web server. It is blocking our office IP too. I have been looking for the setting where I can put our office's IP address to exception list. There is Exceptions in Computers tab but it is a list of windows user, not IPs.

Is there anyway we can add IP address to exception rule from "Block Rules"?

FYI: I understand from this page, http://technet.microsoft.com/en-us/library/cc755191%28v=ws.10%29.aspx, that the block rules come first and it activate allow rules.

I created a new rule to allow our office IP on port 1433 but it is still blocking us on that IP. To make sure if the rule works, I changed it to "Any IP" in allow rule, it doesn't work either.

Is it true that it blocks first and allows next?

Thanks

share|improve this question

1 Answer 1

Yes that is true, delete the rules you created, including your block all rule. Create a new allow rule and only allow traffic on that port from a specific remote IP, then specify your office IP.

Its a little bit tricky. But Windows firewall will actually blocks all traffic by default. So you just need to add the rule above.

share|improve this answer
    
also if i remember 1433 is a SQL Port ? You will need to delete the rule sql creates to allow all inbound traffic. –  Taylor Gibb Aug 15 '12 at 7:31
    
and 1434 for SQL. :) –  Dave Aug 15 '12 at 7:57
    
is this not what you were looking for Jonas ? –  Taylor Gibb Aug 15 '12 at 19:10
    
I followed what you suggested and it is not working. Our port 1433 is accessible from any IP. –  Jonas T Aug 16 '12 at 3:57
    
theres an implicit deny rule, can you use PoSH and output your firewall rules somehow. Im sure we can solve this for you –  Taylor Gibb Aug 16 '12 at 17:47

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.