Windows Server sets a local security policy to disable access from an IP address

1. Click "Start menu/administrative tools/local security policy", select "ip security policy", right-click the blank position on the right of "local computer", and a shortcut menu is displayed, select "create ip security policy" to bring up the Wizard. Click next in the Wizard. When the "secure communication request" screen is displayed, remove the hook on the left of "activate default rules, click "finish" to create a new ip security policy.

2. Right-click the ip security policy and in the "properties" dialog box, remove the hook on the left of "use add Wizard, click "Add" button on the right to add a new rule. Then, the "new rule attributes" dialog box is displayed. Click "add" button on the screen to bring up the ip filter list window. In the list, first remove the hook on the left of "use add Wizard", and then click "add" button on the right to add a new filter.

3. In the "filter properties" dialog box, the "address" tab is displayed first. Select "a specific IP address" as the source address, and enter the IP address you want to block under the specific IP address. Select "my IP address" for the target address and remove "image. With the source address and target address ......" Select any protocol type and click OK.

4. In the "new rule attributes" dialog box, select "New ip filter list" and click "single check" on the left to indicate that it has been activated. Finally, click the "filter operations" tab, deselect the check box on the left of "use add Wizard", and click "add, on the "security measures" tab of the "new filter operation attribute", select "block", enter the name "block" in the "General" tab, and click "OK ".

5. Go to the "new rule attributes" dialog box, click "new filter operation", select the single button on the left to indicate that it has been activated, and click "close" to close the dialog box. In the "new ip security policy attributes" dialog box, click "New ip filter list" and click "OK" to close the dialog box. In the local security policy window, right-click the newly added ip security policy and select assign ".

I opened the text by hand and found a text box on the internet. The method is the same as above.

Control panel-administrative tools-local security policy or command gpedit. msc

Select create IP security policy

Click Next

 

We just want to prohibit him from talking to him, so deselect the check box.

Click finish directly. The check box is the default one.

Pay attention to the "add wizard" in the lower right corner. If this option is selected, cancel it and click "add"

Select the created prohibit ip address Edit

(@ Add ip)

Deselect the "add wizard" check box, and click Add address and target.

Here I select tcp to port 80. Press OK to go back to the upper-layer interface, continue to OK, and return to the new rule attribute panel.

Select the filter operation panel

 

Here, the blocking is previously added. The operation procedure is: deselect the "add wizard" check point to add

// Switch to the "protocol" panel

In general, it is OK to rename it as blocking.

All the Way to OK, return to the check box before you want to disable the ip address. To complete this policy, you need to assign a policy.

 

 

At this point, the user with the ip address shown just now cannot access the server.

Add multiple ip addresses from (@ add ip addresses) to allow access.