?
Solved

block IP from access to my server via VPN

Posted on 2008-11-03
4
Medium Priority
?
789 Views
Last Modified: 2012-06-21
Hello
I have a server and make it as a VPN server for my employees , so my employess access internet on that server via VPN connection.
Because the number of users are rather high I used radius server and Nttacplus as a authentication software.
I notice one unknown users with fixed  IP is get online via VPN with strange username and after I check I found out he access our server illegally. I think it is a bug in my authentication software
I want to know is there anyway I block that IP from accessing my VPN server .
for example is there any option in RAS to can block that IP so that user can't access to my server via VPN.

Thank you


0
Comment
Question by:westdata
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
  • 2
4 Comments
 
LVL 12

Expert Comment

by:Steve
ID: 22865998
the problem is though that that user can always change their IP address and reconnect to you again.. so by simply blocking an IP address wont fix your problem.. and if one person has found it, others will..

you're much better of investigating the problem further, perhaps upgrading your software to a more stable version, or fixing your configuration so that the problem is repaired for good..

its easier to block an IP address via your router if you have to make a temporary fix while you're repairing..

0
 

Author Comment

by:westdata
ID: 22866047
Thanks for you reply
Yes I need to block IP as temporary solution .
Because this server is located far away we don't access to routers we only access server via RDP.
So is there any solution to block that IP via RAS .

Thank you
0
 
LVL 12

Accepted Solution

by:
Steve earned 2000 total points
ID: 22866268
yes.. you can.. run the RRAS snap in ( via mmc )..  this is for windows 2003?

go to IP Routing  / General / Public Network and select 'Properties'

on the general tab, select 'inbound filters' and add a filter to receive all packets 'except those that meet the criteria below' and then add the offending IP addresses..

0
 

Author Closing Comment

by:westdata
ID: 31512632
Thank you
0

Featured Post

Enroll in August's Course of the Month

August's CompTIA IT Fundamentals course includes 19 hours of basic computer principle modules and prepares you for the certification exam. It's free for Premium Members, Team Accounts, and Qualified Experts!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

I've written this article to illustrate how we can implement a Dynamic Multipoint VPN (DMVPN) with both hub and spokes having a dynamically assigned non-broadcast multiple-access (NBMA) network IP (public IP). Here is the basic setup of DMVPN Pha…
This is an article about my experiences with remote access to my clients (so that I may serve them) and eventually to my home office system via Radmin Remote Control. I have been using remote access for over 10 years and have been improving my metho…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
Suggested Courses

762 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question