This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

How to block external IP address

Dear All,

Could you please let me know how to block external IP address who is trying to login to our UTM 9. Just want to block the IP 56.45.X.X. As I am new and learning. Please let me know the steps how to do it. Thank you.

This thread was automatically locked due to age.

0 Scott_Klassen over 9 years ago

Multiple ways to skin a cat here.

Have you tried Definitions & Users>>Authentication Servers>>Advanced Tab.  Using Block Password Guessing, you can block access for a specified amount of time after X number of failed logins.

Other than that, your best bet would be a blackhole DNAT to forward requests from the address to an unused IP address.  https://community.sophos.com/products/unified-threat-management/astaroorg/f/54/p/41512/145893#145893

Search is your friend.  [:)]

__________________
ACE v8/SCA v9.3

...still have a v5 install disk in a box somewhere.

http://xkcd.com
http://www.tedgoff.com/mb
http://www.projectcartoon.com/cartoon/1
Cancel
Vote Up 0 Vote Down

Cancel
0 Chrislangford over 9 years ago in reply to Scott_Klassen

Could you please let me know steps. How to create DNAT rule? Thank you.
Cancel
Vote Up 0 Vote Down

Cancel
0 Chrislangford over 9 years ago

Dear SCOTT,

I have disabled SHELL access. As I don't know how to define DNAT Rule. Thank you.
Cancel
Vote Up 0 Vote Down

Cancel
0 RFCat_vk_01 over 9 years ago in reply to Chrislangford

Hi,
rather than disable shell access, make the access for both the shell and webadmin from your internal network.

There are traps to this if you break your internal configuration you can't get into the UTM.
But at this stage disabling external access to the UTM is the quickest.

Ian
Cancel
Vote Up 0 Vote Down

Cancel
0 Chrislangford over 9 years ago in reply to RFCat_vk_01

I have disabled shell access. Also let me know steps how to disable HTTP access from outside. Could you also please let me know how to block internal host IP which is 192.168.1.50. Its consuming lots of bandwidth. Can we do that? Please let me know.Thank you.
Cancel
Vote Up 0 Vote Down

Cancel
0 BAlfson over 9 years ago

Please open a new thread for a new topic. Also, you will want to explain what HTTP traffic you're trying to block.

Cheers - Bob

Sophos UTM Community Moderator
Sophos Certified Architect - UTM
Sophos Certified Engineer - XG
Gold Solution Partner since 2005

MediaSoft, Inc. USA
Cancel
Vote Up 0 Vote Down

Cancel