For protection of a Web Server, I need to allow some trusted IP and block others. The solution I have tried:
Create 2 inbound rules :
- Allow some IP and RDP IP
- Block All
this resulted on blocking every connection. I learned that Windows Firewall block everything explicitly ignoring the allowed rules.
https://technet.microsoft.com/en-us/library/cc755191%28v=ws.10%29.aspx
- This is not true https://serverfault.com/questions/51146/windows-firewall-2008-server-allow-only-given-ip-in-block-all-others
By default, anything that does not have a rule is automatically blocked by the built-in firewall in Windows server 2008. So to make this work, all I needed to do was add a rule specifically allowing the IP address to get in.
Although the firewall is turned on and creating inbound rules that allows trusted IPs , random IP can still access the Server either with RDP or HTTP request.
Create outbound rule: Block All
Create Inbound rule : Allow some IP
It does not have any effect. The connection are open despite the firewall is turned on with these rules.
Windows Firewall Properties - screenshot http://postimg.org/image/stg1jtxjh/
please help!