D-Link Forums

The Graveyard - Products No Longer Supported => D-Link NetDefend Firewalls => Topic started by: skikayaker on March 06, 2013, 07:21:33 PM

Title: Do Dropped Connections ever stop trying?
Post by: skikayaker on March 06, 2013, 07:21:33 PM

I've successfully blocked a majority of unwanted WAN --> DMZ traffic that had been bombarding my services for years.  Over the past few months I've been monitoring all dropped packets and see many pesty attempts that have been blocked for months.

My Question:
Does blocking the unwanted subnets and ports eventually cause the attempts to stop or do they just go on forever?  I have blocked a few aggressive IP addresses and subnets from bombarding DNS port 53, and also RDP 3389, SQL 1433 (login attempts), and FTP 21 that have not quit attempting to access my network despite being blocked months ago.

Title: Re: Do Dropped Connections ever stop trying?
Post by: chechito on March 07, 2013, 08:08:10 PM

maybe a good practice will be take note of the ip pool addresses of the country(s) wich you want to accept traffic and deny all anothers, this reduces the posible attak sources