This is a series of tutorials, this time I will go through the steps of sealing the IP of Windows Server 2003, the most widely used server operating system for the entry-level, and read a lot of articles about this piece on the Internet, but there are always mistakes.
win+r or start - run
Type gpedit.msc to launch Group Policy Manager
Left-click Computer Configuration - Security Settings - IP Security Policy on the local computer
Right-click the space on the right and select Create IP Security Policy
Welcome to the next step
Fill in the name and remarks of this strategy here, as shown in the figure
Next, don't tick Activate default response rules
Next, edit properties are ticked by default, click Done
Don't tick Use Add Wizard , then tap Add in front of you
Now you see the IP filter list tab , go ahead and click Add
Don't check Add Use Wizard, fill in the filter name in the box under Name, as shown in the picture, and then click Add
Now you see the IP filter attributes, if you want to block a separate IP, the source address should select a specific IP address, if you want to block the IP segment, the source address should select a specific IP subnet, the destination address should select my IP address, click OK
After adding the IP filter list attributes, there will be an additional one below, as shown in the figure, click OK
Go back to the IP Filter List tab and click the filter name you just added, as shown in the figure
Then click the Filter Actions tab, do not check Use Add Wizard, click Add on the left
The New Filter Action Properties pops up, and fill in the Action Name in the General tab, as shown in the figure
Then click the Security Measures tab, click Block, and click Apply.
Jump to the filter operation and click the name of the operation, as shown in the figure (the name of the operation I used is "block"), click Apply and then click OK
Next, you will jump to the Security Policy property, check the IP filter you just added, and click OK
Right-click on the IP policy you just created (the name of the policy I used is: Block his IP), click Assign, and the rule will take effect immediately, and there is no need to log out and restart.
This process is over, if there are still mistakes, please PM me.
|
Posted on 8/4/2015 5:01:50 PM
|
|
|
|
Posted on 8/12/2015 12:36:06 AM