Shulou(Shulou.com)06/02 Report--

Purpose: to prohibit one or some IP from connecting to the database on the server

Methods:

1. Enable the Ipsec Policy Agent service on the server and set it to start automatically, as shown below:

two。 Open the IP Security Policy on the local computer. As shown below:

Run-gpedit.msc- computer configuration-Windows Settings-Security Settings

-IP security policy on the local computer

3.1Create IP security policy:

Click the right mouse button in the space on the right, and select "create IP Security Policy" in the pop-up dialog box, as shown below:

3.2 create the manage IP filter list

1) right-click in the space and select "manage IP filter list and filter actions" in the pop-up options

2) Select "add" in the pop-up dialog box as shown below

3) create an "allow" or "block" list in the "IP filter list" that pops up, as shown below:

4) Click "add", then pop up "Welcome to the IP filtering Wizard", and click next.

5. The IP to be blocked can be described in the description dialog box to facilitate distinction and memory, as shown in the following figure:

6) the source of IP traffic is native IP, select "my IP address", and then select the next step, as shown below:

7) in order to prohibit a single IP, I choose "a specific IP address or subnet" and choose according to your own needs.

8) the protocol can be selected as needed, because we want to prohibit users from connecting to the SQL service, so we want to prohibit port 1433. First select "any" and then click next, as shown below:

9) check "Edit Properties", and then click finish, as shown below:

10) Click "finish" after the pop-up dialog box, select "Protocol", according to the known SQL port is 1433 is TCP protocol, these can be Baidu to. Fill in the following figure:

11) Click "OK" and return to "IP address filter list". The newly added column appears in the "IP filter" below, as shown below:

12) continue to click "OK" to return to "manage IP filter list and filter actions" as shown in the following figure:

3.3 filter actions

Click "apply" first, and then "close" becomes "OK", then click "OK".

4. Enable Rul

1) right-click the created rule and select "Properties". Appears as shown in the following figure:

2) Click "add" to add rules. The steps are as follows:

Click "apply" and then click "OK".

5. Allocation policy: it means to enable this service, and the service will not take effect until it is enabled. As shown below:

At this point: the disabled IP client SQL cannot connect to the server.

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.