Print

Please login or register.
1 Hour 1 Day 1 Week 1 Month Forever
Login with username, password and session length

[skikayaker]

I've successfully blocked a majority of unwanted WAN --> DMZ traffic that had been bombarding my services for years.  Over the past few months I've been monitoring all dropped packets and see many pesty attempts that have been blocked for months.

My Question:
Does blocking the unwanted subnets and ports eventually cause the attempts to stop or do they just go on forever?  I have blocked a few aggressive IP addresses and subnets from bombarding DNS port 53, and also RDP 3389, SQL 1433 (login attempts), and FTP 21 that have not quit attempting to access my network despite being blocked months ago.

[chechito]

maybe a good practice will be take note of the ip pool addresses of the country(s) wich you want to accept traffic and deny all anothers, this reduces the posible attak sources