Hi, This is my first post on here, and i am desperate for some help/suggestions. o have to sites, one is being hosted by a hosting company, and the other i am running on my server 2003 box at home. The one i am concerned with is the home server, i have been using commview when i want to take a quick look at active connections, but last night my server was being pounded with huge packets all night long, all from same ip. My question is, How can i block/ban an ip from making any connections to this box? I am new to all of this, and I am only doing this for the web developent learning, but this is my home connection, when my server gets pounded like that, it slows my desktop connection to almost a halt!
Presently, All I have is the Windows Firewall, But I will order a hardware based Firewall soon. I know these connections coming in are using my resources and processor, so I definately want to block this stuff before it ever makes it to my box. But as of now I am kinda out in the rain on this, and wanted a quick fix for this if i come across this problem again.
OK, I played with IPSec till I figured it out. I watched the packets and connections afterwards and the IP was still trying to make the connection. I had packets coming in, very small, but none were goin back out. Big improvement over what it was doin before. I have been doin some research on some products and i think I'm gonna get something to go between my connection and the box to block IP's there, and also stand as my intrusion detection. Thanks guys for the help.
I highly recommend IPSec. Also RRAS, on your server, will block the IP(s) you need to block.
Allen Burnett StormHosts[email protected] Professional MS ASP, .Net, MS SQL 2000/2005 and Reseller Hosting Since 2001 Clustered servers @ Equinix Helm/cPanel/WHM/VPS/colo/Dedicated/MailFoundry anti-spam/Server Mgmt