Blocking outgoing ports
Is it possible to block all outgoing connections from a port on Windows Server 2003? If it is not possible by default, is there a firewall program that can block outgoing ports?
May 16th, 2009 3:12am

Yes,several ways, but the best way is using IPSec See here how to accomplish it: How to block specific network protocols and ports by using IPSec
Free Windows Admin Tool Kit Click here and download it now
May 16th, 2009 6:02pm

I ran this: IPSeccmd.exe -w REG -p "Block UDP 29910 Filter" -r "Block Outbound UDP 29910 Rule" -f 0=*:29910:UDP -n BLOCK and it says command executed successful, but when I run: netdiag /test:ipsec /debug it says that there is no policies or blocks setup.
May 17th, 2009 3:00am

Is the IPsec Policy Agent service started?
Free Windows Admin Tool Kit Click here and download it now
May 17th, 2009 9:41pm

I can't get on to the server now, but there was an IPSec service running but it was not called IPsec Policy Agent. IPsec Policy Agent was not a service in the list. This is what I did: 1. I downloaded Windows Server Support Tools and Installed. 2. I downloaded Windows XP SP2 Support Tools and installed on my computer and copied IPSeccmd.exe to the server since I couldn't install XP software on Windows Server. 3. I ran that command in command prompt.
May 17th, 2009 11:57pm

Hi, You can run the following command to check if the IPSec policy has been created: ipseccmd show all Normally, you should see the policy in the Local Policy section.
Free Windows Admin Tool Kit Click here and download it now
May 20th, 2009 12:21pm

Hi Joshua,I would also like you to check the inbuilt firewall / windows firewall.b) you can also use software firewall called ISA firewall / forefront server to block a specific port from a specific IP address but as Joson, shadowman mentioned you could rely on IPSEC. sainath Attending Microsoft Teched 2009
May 21st, 2009 4:29pm

What exactly do you need me to check in the windows firewall? Hi, You can run the following command to check if the IPSec policy has been created: ipseccmd show all Normally, you should see the policy in the Local Policy section. I did that and it says no policy assigned, even though I ran the command to block the port.
Free Windows Admin Tool Kit Click here and download it now
May 22nd, 2009 11:22am

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics