Windows 2003 can I use a CIDR list to ban ip ranges?

Discussion in 'Security' started by jvmills, Jun 20, 2007.

  1. #1
    Hi all

    Common problem - I want to block a country range of IP addresses.

    I have the ranges in 2 formats, one with the IP followed by subnet mask,

    
    58.14.0.0	0.1.255.255
    58.16.0.0	0.7.255.255
    58.24.0.0	0.1.255.255
    58.29.0.0	0.0.255.255
    58.30.0.0	0.1.255.255
    58.82.0.0	0.1.255.255
    58.87.32.0	0.0.31.255
    
    Code (markup):

    and the other in CIDR format, Ip address followed by "/15" for example, as a shorthand for the subnet.


    58.14.0.0/15  China
    58.16.0.0/13  China
    58.24.0.0/15  China
    58.66.0.0/15  China
    58.68.128.0/17  China
    58.82.0.0/15  China
    58.87.64.0/18  China
    
    Code (markup):
    What I want to know is, is there a way on a Windows 2003 (IIS 6.0) where I can ban these IP ranges in one large batch, rather than entering each one (over 400!) manually in the IPSEC or IIS user interface?

    Is there for example, a file I can populate with the data?

    Thanks
     
    jvmills, Jun 20, 2007 IP