iptables equivelent for windows 2008 r2 server

[RabbieBurns]

My hardware firewall is just a netgear adsl modem. I use port forwading to servers, and on my linux boxes i run iptables to limit connections to certain IPs.

 

Im wanting to forward 3389 (rdp) to a windows machine, but I want to limit connections to certain IPs only..

 

Is there anything in windows I can use to do this, or perhaps a 3rd party (free) application I can use?

 

Cheers

[RabbieBurns]

OK it seems there is something..

 

Netsh Commands for Windows Firewall with Advanced Security

 

But I cant quite figure out the syntax...

 

I want to allow all local IPs to port 3389 (rdp) but only allow IP 1.2.3.4 and 5.6.7.8 from the intenet..

 

Can anyone point me in the right direction? Cheers

[PiqueABoo]

Probably easier if you fire up the Advanced Firewall (WFAS) MMC.

[Arthur]

There's already a default rule for Remote Desktop, so you would only need to update it with the remote IPs. e.g.

 

netsh advfirewall firewall set rule name="Remote Desktop (TCP-In)" new remoteip=1.2.3.4,5.6.7.8

 

To specify a range of IPs you can do either of the following...

 

netsh advfirewall firewall set rule name="Remote Desktop (TCP-In)" new remoteip=1.2.3.4/32,5.6.7.8-5.6.7.14

[RabbieBurns]

cheers, will try it out on monda