The Planet Forums > locking complete IP ranges with IPSEC

Full Version: locking complete IP ranges with IPSEC

The Planet Forums > Security > General Security > Windows Security

Helix

Jan 15 2006, 06:36 PM

Does anyone know how to setup a full IP range ban ON IPSec, single IPs are easy but I'm having no luck blocking a whole range

Matt2k

Jan 15 2006, 08:30 PM

I believe you can only ban by subnet mask, which probably makes sense performance-wise, since a rule only involves a single pattern match, rather than x-millions of pattern matches, in the case of a large range.

Kyle

Jan 15 2006, 11:52 PM

Yep, only subnet mask.

Helix

Jan 16 2006, 08:44 AM

Like IP 12.34.0.0 submask 255.255.0.0 ?

This is a "lo-fi" version of our main content. To view the full version with more information, formatting and images, please click here.