DrayTek UK Users' Community Forum

Help, Advice and Solutions from DrayTek Users

2800 Blocking incoming IP addresses

  • nick555
  • Topic Author
  • Offline
  • Junior Member
  • Junior Member
More
03 Jan 2010 06:19 #1 by nick555
2800 Blocking incoming IP addresses was created by nick555
Hi

I'm getting a fair amount of remote attempts to log into my server. I'd like to be able to block certain ranges of IP addresses, is there a way I can do this on my 2800 router please?

Please Log in or Create an account to join the conversation.

More
04 Jan 2010 12:25 #2 by lozstlouis
Replied by lozstlouis on topic 2800 Blocking incoming IP addresses
To block connections they'd still have to make contact with your router. So there isn't much to be gained by doing it. I don't think it can be done anyway.

www.alits.co.uk

Please Log in or Create an account to join the conversation.

More
05 Jan 2010 10:22 #3 by acseuser
Replied by acseuser on topic 2800 Blocking incoming IP addresses
That's a pity; I was looking for the same function...

I have a couple of old routers here that can be programmed to drop/ignore traffic from specific IP addresses.

Aww well. Something for the wishlist..

Please Log in or Create an account to join the conversation.

More
05 Jan 2010 12:45 #4 by njh
Replied by njh on topic 2800 Blocking incoming IP addresses
Can't you just set up a call filter to block the ranges you want?

2900Gi/v2.5.6; 2900/v2.5.6

Please Log in or Create an account to join the conversation.

  • nick555
  • Topic Author
  • Offline
  • Junior Member
  • Junior Member
More
05 Jan 2010 19:24 #5 by nick555
Replied by nick555 on topic 2800 Blocking incoming IP addresses

NJH wrote: Can't you just set up a call filter to block the ranges you want?



I'm working on that. Is it a call filter or data filter?

Please Log in or Create an account to join the conversation.

More
06 Jan 2010 09:23 #6 by voodle
Replied by voodle on topic 2800 Blocking incoming IP addresses
It would need to be a Data filter, its comparatively easy to set up on the 2800 series.
You'd only need to make one rule to block an IP range, set it to Block Immediately, change the Protocol to TCP/UDP etc depending on what you're blocking, put the IP address/subnet that you want to block in the Source IP and leave the source ports blank. Put the destination IP as your server and the destination ports that you want to block.

edit: you'd also need to change the Direction to IN

Please Log in or Create an account to join the conversation.

Moderators: ChrisSami