Network Security Internet Technology Development Database Servers Mobile Phone Android Software Apple Software Computer Software News IT Information

In addition to Weibo, there is also WeChat

Please pay attention

WeChat public account

Shulou

How to prevent an IP from accessing my computer-restrict an IP segment with local security policy

2025-01-19 Update From: SLTechnology News&Howtos shulou NAV: SLTechnology News&Howtos > Servers >

Share

Shulou(Shulou.com)06/03 Report--

Method 1: through the security policy restrictions included in windows

Open the local security settings, click "IP Security Policy, on the local machine"-- > create IP security policy-> next-> write a name casually, such as enter block, and then click on the next step. The cue point is, until it is finished, a policy called "block" has been created.

Click "IP Security Policy on Local Machine"-- > manage IP filter tables and filter actions-> add-> name add 75.156.25 (to identify the best IP segment)-> add-> next-> Source address Select a specific IP subnet IP enter the subnet mask of 75.156.25.0 to change to 255.255.255.0-- > next-> destination address Select my IP address-> next-> Protocol type is any-> next-> complete all shutdown.

The following point we started to establish a policy called "block", point properties-> fill-> next step-> next network type select all network connections-> next step-> when prompted is-> to the IP filter list Click on the option named 75.156.25 that we just created-> next-> Select block-> next to finish, close.

Finally, click the "block" policy, right-click and assign. So far, we have blocked the network segment at the beginning of 75.156.25. Of course, we have also blocked the IP of 75.156.25.192. If you want to block other IP's * *, you can do the same.

Method 2: how to prevent local access to the specified IP address

Internet options > Security > Select a restricted site and enter a site or IP

Method 3: it can be easily restricted by the filtering rules of firewalls and routers.

Method 4: modify the hosts file of the system to restrict

Open the HOSTS file in notepad (C:\ WINDOWS\ system32\ drivers\ etc\ hosts)

Enter on the last line and fill in

0.0.0.0 123.456.789.123

Replace "123.456.789.123" with a forbidden IP (or URL).

Method 5: restrict native access to a certain IP through the IP security policy in the group policy

First

Open Group Policy

Enter the security settings in the computer configuration, and click the IP security policy in it.

Create a new IP policy next step

Just type in the name and I'll use "block" and click the next step.

Activate the default response rule and check the next step

The verification method chooses the first V5 protocol.

There may be a warning. Just make sure.

Finish editing properties by ticking

Go back to the original interface and click the new name "Block"

He'll come out with a property window.

Click add

Next step

Do not specify a tunnel

Next step

All network links

Next step

V5 protocol

Next step

This is supposed to be a security rules wizard interface.

Point add

Come out IP filter list

Point add

Next step

The source address is my IP address

Next step

The destination IP address uses a specific IP address, and then enter the IP address you want to block

I use 192.168.0.1 here.

Next step

Protocol, for the communication protocol used by your game server, choose by yourself, usually TCP

I use ICMP here

Next step

Edit attribute tick

Next step

Come out filter Properties

The mirror must be ticked so that the remote IP can be blocked.

Then click OK.

Back to the IP filter list, click OK

Click the IP filter you just created. If there is no name on it, then her name should be

New IP filter list. Click next in the circle to enter the filter operation.

Point stop, next step

Complete

New rule properties

No need to do it, just click OK and then close it.

Now go back to the original group policy interface

Right-click the name we just created is block, select assign

At this time, its strategy has been assigned to be.

PING 192.168.0.1 has been shown on my side.

C:\ Documents and Settings\ Administrator > ping 192.168.0.1

Pinging 192.168.0.1 with 32 bytes of data:

Destination host unreachable.

Destination host unreachable.

Destination host unreachable.

Destination host unreachable.

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.

Views: 0

*The comments in the above article only represent the author's personal views and do not represent the views and positions of this website. If you have more insights, please feel free to contribute and share.

Share To

Servers

Wechat

© 2024 shulou.com SLNews company. All rights reserved.

12
Report