Connect. Communicate. Collaborate. Securely.

Home » Kerio User Forums » Kerio Control » is this rule correct to block host ..??
  •  
Night Shadow

Messages: 48
Karma: 0
Send a private message to this user
hi 2 all friends ..

mr.jacky is a hacker and he connect to my KWF with this information :

host name ( computer name : jacky

ip address : he stolin an ip addrees of any user which connected

user / password : didnot need because he use ip which already connected .

the only way is to block his host name ..i make this rule but didnot work ..why ??

http://www.ask-pcup.com/uploads/1208353843.jpg
  •  
daleel

Messages: 8
Karma: 0
Send a private message to this user
Hi
I think this rule most be befor users rule
tel me if this rule passed

Iraqi e-mail daleelbassam<_a.t_>yahoo.com
  •  
Night Shadow

Messages: 48
Karma: 0
Send a private message to this user
والله حبي خليته بالبداية وهم ما اشتغل
i put this rule in beginning of rules ...it is still not work ..

heeeeeeeeeeeeeeeeeeeeeeeeeelllllllllllllppppppppppp Shocked Shocked
  •  
crown2000

Messages: 10
Karma: 0
Send a private message to this user
hi Night Shadow

it is work with me.
i think you have to move the rule that you made to the first row.


first example: Block only internet connection
http://up103.arabsh.com/files/ml073mfvfrpsfd5sa8jb.jpg



second example: Block everything
http://up103.arabsh.com/files/vizx6p85kzjp7521kjhd.jpg




The result: computer " NoteBook " cannot brows the internet
http://up103.arabsh.com/files/dt9ukw14pv0qid9nokk9.jpg

[Updated on: Wed, 21 May 2008 18:09]

  •  
Night Shadow

Messages: 48
Karma: 0
Send a private message to this user
please can you UPLOAD Pictures again ??

use this site :

www.ask-pcup.com to upload ..

thanks
  •  
crown2000

Messages: 10
Karma: 0
Send a private message to this user
hi

I have changed the above pictures links.

thank you very much for the upload link.


Best regards
  •  
henrysbox

Messages: 26
Karma: 0
Send a private message to this user
- if the users connection is coming from outside network like internet, then you can check the connection status and the logs from your firewall.
- limit the ports coming in or out from your network and check the logs, connection status and statistics for any unusual port access and large traffic passing by.
- also check your local network for any outside connection that is being used as a back door.
- it may be a case of a network breach or maybe someone is just goofing you. Wink
  •  
Night Shadow

Messages: 48
Karma: 0
Send a private message to this user
again ...the pictures didnot load ..

please man

please can you UPLOAD Pictures again ??

use this site :

www.ask-pcup.com to upload ..

thanks again ..
  •  
ajamali

Messages: 100
Karma: 1
Send a private message to this user
hey Mr. Mena7i

may be you should enter FQDN not hostname

like jacky.domainname.com

best regards
  •  
crown2000

Messages: 10
Karma: 0
Send a private message to this user
i think you have to move the rule that you made to the first row.


first example: Block only internet connection
http://www.ask-pcup.com/uploads/1213387571.jpg



second example: Block everything
http://www.ask-pcup.com/uploads/1213372510.jpg




The result: computer " crown " cannot brows the internet
http://www.ask-pcup.com/uploads/1213388593.jpg


I am so sory Brother Night Shadow

Best Regards

[Updated on: Fri, 13 June 2008 10:47]

  •  
Night Shadow

Messages: 48
Karma: 0
Send a private message to this user
NOW PICTURES OK ..

THANK YOU CROWN VERY MUCH ,,,I WILL TRY AND TILL U WHAT HAPPENED ..


THANK AGAIN
  •  
Night Shadow

Messages: 48
Karma: 0
Send a private message to this user
Not WORK WITH ME ...

PLS can you show me your all rules ??

im very thank you ..
  •  
crown2000

Messages: 10
Karma: 0
Send a private message to this user
http://www.ask-pcup.com/uploads/1213835913.jpg



best regards Brother Night Shadow

  •  
Night Shadow

Messages: 48
Karma: 0
Send a private message to this user
thank you brother to your help ...

i hope to help you in present ...

thanks again ..

  •  
an2ny79

Messages: 109
Karma: 2
Send a private message to this user
Problem is.. what if he change computer name??? yoink!

I think, best way is:

Use KWF DHCP and reserve IP using MAC Address...

then use Microsoft AD to keep user from changing TCP/IP property.

Restric workstation privilege as well...

Well, he could still hack it, but if he doesn't know the flow of your security procedures, it would take time for him to realize that.
Previous Topic: Making an "IP whitelist" from an IPGroup
Next Topic: how can i make ActiveDirectory in win server 2003 ?
Goto Forum:
  


Disclaimer:
Kerio discussion forums are intended for open communication between forum members and may contain information and material posted by members which may be useful in learning about Kerio products. The discussion forums are not intended to provide technical support for any specific product. Any information implied or expressed in the discussion forums is that of the posting member. Kerio is in no way responsible for the information posted in the forums, or its accuracy. Kerio employees may participate in the discussions, but their postings do not represent an offical position of the company on any issues raised or discussed. Kerio reserves the right to monitor and maintain the forums to promote free and accurate exchange of information.

Current Time: Mon Oct 23 16:59:34 CEST 2017

Total time taken to generate the page: 0.00591 seconds
.:: Contact :: Home ::.
Powered by: FUDforum 3.0.4.