DrayTek UK Users' Community Forum

Help, Advice and Solutions from DrayTek Users

2800 Blocking incoming IP addresses

  • nick555
  • Topic Author
  • Offline
  • Junior Member
  • Junior Member
More
06 Jan 2010 09:28 #59657 by nick555
Replied by nick555 on topic 2800 Blocking incoming IP addresses
Thanks, I'm getting attempts from about 15 sources. Do I set up a new filter for each & then branch to another filter set?

Please Log in or Create an account to join the conversation.

More
06 Jan 2010 10:15 #59660 by voodle
Replied by voodle on topic 2800 Blocking incoming IP addresses
You would yes, that's one limitation of the 2800's firewall, with the 2820 series you can just add them to an IP object group.

Please Log in or Create an account to join the conversation.

  • nick555
  • Topic Author
  • Offline
  • Junior Member
  • Junior Member
More
06 Jan 2010 10:27 #59661 by nick555
Replied by nick555 on topic 2800 Blocking incoming IP addresses
Ok thanks for your help.

Please Log in or Create an account to join the conversation.

  • nick555
  • Topic Author
  • Offline
  • Junior Member
  • Junior Member
More
27 Jan 2010 09:23 #60090 by nick555
Replied by nick555 on topic 2800 Blocking incoming IP addresses
Update

I have now upgraded to a 2820n. Can anyone help with setting up a block for whole IP address ranges please?

Please Log in or Create an account to join the conversation.

More
27 Jan 2010 22:52 #60122 by dannyboy1121
Replied by dannyboy1121 on topic 2800 Blocking incoming IP addresses
1 - Create your IP objects (i.e. an object for each person trying to connect)
2 - Create an IP group on the WAN interface and add in your objects (you may need to create a few of these because I believe they are limited to approx 8 ip objects per group)
3 - Create a data filter that is direction WAN -> LAN - add your ip object as the source etc etc and set the rule to block. Make sure you have checked the box to enable the rule and submit it.
4 - Repeat as required for any additional IP groups.

Dan

Please Log in or Create an account to join the conversation.

  • nick555
  • Topic Author
  • Offline
  • Junior Member
  • Junior Member
More
28 Jan 2010 03:55 #60123 by nick555
Replied by nick555 on topic 2800 Blocking incoming IP addresses
Thanks Dan

When creating the IP objects, can I block an entire IP range; for instance if I get an attempt from someone using a Turkish ISP, I can block the whole ISP's address range?

Please Log in or Create an account to join the conversation.

Moderators: ChrisSami