How to add a Kerio Rule to Block an IP Range?

Discussion in 'other firewalls' started by WinHelp2002, Feb 12, 2006.

Thread Status:
Not open for further replies.
  1. WinHelp2002

    WinHelp2002 Registered Member

    Joined:
    Jul 16, 2005
    Posts:
    3
    Location:
    USA
    How to add a Rule to Block a specific IP Range? ... (Kerio v.4.2.3)
    [Example]
    Netrange: 81.9.5.0 - 81.9.5.255 (81.9.5.0/32)

    And would this method be the same as blocking one IP Address?
    [Example]
    85.255.113.173
     
  2. CrazyM

    CrazyM Firewall Expert

    Joined:
    Feb 9, 2002
    Posts:
    2,428
    Location:
    BC, Canada
    While I have not used the latest version of Kerio, the advanced rules should allow you to manually create such a rule. Is this for outbound, inbound or both?

    Creating the rule would be similar, whether single IP is specified or a range.

    Regards,

    CrazyM
     
    Last edited: Feb 12, 2006
  3. WinHelp2002

    WinHelp2002 Registered Member

    Joined:
    Jul 16, 2005
    Posts:
    3
    Location:
    USA
    CrazyM,
    For both ...
    Well ... I was hoping someone with v. 4.2 would know "How To" ...
     
  4. Kerodo

    Kerodo Registered Member

    Joined:
    Oct 5, 2004
    Posts:
    7,779
    I am not running Kerio now so I can't check, but I believe in the Network section/tab there is a Packet Filter button. Click that, and in there you can set up all your custom rules. If you want to set up rules for DNS/DHCP/ICMP etc then also make sure you disable the Predefined Rules.
     
  5. CrazyM

    CrazyM Firewall Expert

    Joined:
    Feb 9, 2002
    Posts:
    2,428
    Location:
    BC, Canada
    Your firewall should already be blocking unsolicited inbounds. Unless you want to log or not log these specifically you should not need an inbound rule.
    As Kerodo eluded to, the advanced packet filtering should allow you to create a rule manually. The wizard should be fairly intuitive.

    Action: Block
    Direction: Outbound
    Application: Any
    Protocol: Any
    Local Port: Any
    Remote Address: range 81.9.5.0 - 81.9.5.255
    Remote Port: Any
    Logging: Enabled

    Regards,

    CrazyM
     
  6. WinHelp2002

    WinHelp2002 Registered Member

    Joined:
    Jul 16, 2005
    Posts:
    3
    Location:
    USA
    CrazyM,
    Ok thanks ... I'll give that a try
     
Loading...
Thread Status:
Not open for further replies.