all groups > iis ftp > september 2006 >
You're in the

iis ftp

group:

Automatically block troublesome IP Addresses


Automatically block troublesome IP Addresses Kirk Hilzinger
9/18/2006 2:26:02 PM
iis ftp:
Is there a way or software out there that will automatically block an IP
Address from connecting to an FTP server after a user definable number of
invalid logon attempts. Most of the attacks I get are for invalid user names
and I would like to just kick that person off the server all-together rather
than take up system resources and bandwidth. By the time I see it in the
log, the user is usually gone and I have to resort to reporting his IP
address to the ISP and blocking the IP at my hardware firewall.

If not, I would suggest this for the new version of IIS that comes with
Re: Automatically block troublesome IP Addresses Walter Weiss
9/19/2006 12:00:00 AM
Hi

on the FTP sitemanager go to properties -> directory security there you can
block or allow any IP you want.

Walter
IIS support engeneer


[quoted text, click to view]

Re: Automatically block troublesome IP Addresses Bernard Cheah [MVP]
9/19/2006 12:00:00 AM
Not automatically......

Anyway, as for the request - this would best done at firewall/router level.
Even if IIS is able to auto block offensive IP, it still requires to
response with 403.6 status code. If the attack traffic is huge, IIS going to
suffer as well.

--
Regards,
Bernard Cheah
http://www.iis.net/
http://www.iis-resources.com/
http://msmvps.com/blogs/bernard/


[quoted text, click to view]

Re: Automatically block troublesome IP Addresses Kirk Hilzinger
9/19/2006 6:21:02 AM
I was afraid that was the answer. I guess something more in the line of
intrusion protection. Thank you, anyway.

[quoted text, click to view]
Re: Automatically block troublesome IP Addresses Don
9/28/2006 2:52:17 PM
[quoted text, click to view]

Hi, I am developing a service to do just what you want. I am having
problems getting the block list to work immediately. As soon as I get
this fixed I will let this list know where the app can be downloaded from.

I have written the app specifically for Win2k3 and IIS but theoretically
it could be converted for other servers as well.

AddThis Social Bookmark Button