Printable View
My hardware firewall is just a netgear adsl modem. I use port forwading to servers, and on my linux boxes i run iptables to limit connections to certain IPs.
Im wanting to forward 3389 (rdp) to a windows machine, but I want to limit connections to certain IPs only..
Is there anything in windows I can use to do this, or perhaps a 3rd party (free) application I can use?
Cheers
OK it seems there is something..
Netsh Commands for Windows Firewall with Advanced Security
But I cant quite figure out the syntax...
I want to allow all local IPs to port 3389 (rdp) but only allow IP 1.2.3.4 and 5.6.7.8 from the intenet..
Can anyone point me in the right direction? Cheers
Probably easier if you fire up the Advanced Firewall (WFAS) MMC.
There's already a default rule for Remote Desktop, so you would only need to update it with the remote IPs. e.g.
To specify a range of IPs you can do either of the following...Code:netsh advfirewall firewall set rule name="Remote Desktop (TCP-In)" new remoteip=1.2.3.4,5.6.7.8
Code:netsh advfirewall firewall set rule name="Remote Desktop (TCP-In)" new remoteip=1.2.3.4/32,5.6.7.8-5.6.7.14
cheers, will try it out on monda :)