Comments on: Block IP Addresses using IP Security Policy in Windows Server 2003

By: Wow

Wow — Thu, 02 Feb 2012 19:55:51 +0000

Good grief. How complicated do they need to make it? Haha. Microsoft is silly. 37 steps to block an ip address? Just ridiculous!

By: Chris Stinson

Chris Stinson — Tue, 18 Oct 2011 16:32:41 +0000

Under step 23, where it gives an option to specify “A specific IP Subnet” – you’ll put in 58.0.0.0, with a subnet of 255.0.0.0.

This will block 58.0.0.0 – 58.255.255.255.

To determine the specific subnet needed to block a range of IP addresses, use the online subnet calculator here. Keep in mind 58.x.x.x is a Class A address, so click that option.

By: Anil Arya

Anil Arya — Thu, 22 Sep 2011 10:23:08 +0000

Great… IP security…

By: Bill James

Bill James — Sat, 27 Aug 2011 18:09:18 +0000

Great info! Now how can we block a whole range of IP addresses? (ex. 58.0.0.0 – 58.255.255.255)

By: Mike

Mike — Tue, 23 Aug 2011 14:57:04 +0000

The default policies are designed (ONLY) for computers that are members of an Active Directory domain