Hello all

i need to find out how to set up windows 2003 firewall in such a manner that it will block a full range of IPs (basicaly a complete country ips) using windows firewall.

i have tried a software firewall, (does the job) however it closes alot of ports that are needed to access the server and i need these ports/ips to remain open.

all i want to do is block a full country from accessing the server.

any and all sugjestions welcomed.


DeepSeaDiver

Unfortunately Windows Firewall does not block IP addresses in any form or reason. However IPSec does block IP addresses and ranges through Access Control Lists.

What Is IPSec?

http://technet2.microsoft.com/windowsserve...3.mspx?mfr=true

Can you suggest some windows based firewall programs that are available commercially? I was using a program called blackice that is no longer.

I don't have experience in this area, but I was wondering why would you be interested in blocking a whole country?

If you have no reason to accept traffic from other countries, you can reduce spam and attacks greatly.
It is difficult though because there are a great deal of IP subnets assigned to each country.
Adding one-by-one with IPSEC is painful.