Connect. Communicate. Collaborate. Securely.

Home » Kerio User Forums » Kerio Control » Large Scale I.P. Blocking (Best method to MINIMIZE hacking)
  •  
dkrohn

Messages: 12
Karma: 1
Send a private message to this user
We have many hack attempts against our mail server and internal systems (which are all behind Kerio Control) - these IP addresses are spoofed and done by bits.

Since we ONLY do business in the U.S.A. does anyone see any reason NOT TO BLOCK, large blocks of I.P. addresses that are not assigned to the U.S.?

For instance, I found a site that lists I.P. address blocks and many are assigned exclusively to, for instance, Russia or China, etc. These IP addresses are some that are spoofed in the hack attempts.

My theory here is to add as many blocks as I can thereby REDUCING the number of IP address that might come through the firewall. This would be a REDUCTION, nor ELIMINATION program.

The site I am using for IP address block assignments is;
http://www.lookup-ip-address.info/ip-addresses

  •  
Petr Dobry (Kerio)

Messages: 774
Karma: 60
Send a private message to this user
Well, you won't receive any emails from this forum for instance (as the server is located in Czech Republic).

Petr Dobry
Product Development Manager | Kerio

Stay Connected Anytime, Anywhere. Discover Kerio Cloud!
Looking for help ? - http://kb.kerio.com
  •  
gskibum

Messages: 30
Karma: 1
Send a private message to this user
I applied 144.0.0.0 - 144.255.255.255 to a firewall last night. It's working great so far.
  •  
UnifiedTechs-Brian

Messages: 162
Karma: 15
Send a private message to this user
Be careful, IP blocks are often resold and transferred multiple times, 144.0.0.0 may have been all china at one time, but it involves many US and Australia ranges now:

http://www.lookup-ip-address.info/ip-address-range/144

- Brian
Kerio Preferred Partner, Reseller & Hosting Provider
Unified Technology Solutions
Previous Topic: How to figure out what is being blocked on one device
Next Topic: Help me to share networks in VPN
Goto Forum:
  


Disclaimer:
Kerio discussion forums are intended for open communication between forum members and may contain information and material posted by members which may be useful in learning about Kerio products. The discussion forums are not intended to provide technical support for any specific product. Any information implied or expressed in the discussion forums is that of the posting member. Kerio is in no way responsible for the information posted in the forums, or its accuracy. Kerio employees may participate in the discussions, but their postings do not represent an offical position of the company on any issues raised or discussed. Kerio reserves the right to monitor and maintain the forums to promote free and accurate exchange of information.

Current Time: Thu Jan 19 05:28:25 CET 2017

Total time taken to generate the page: 0.00926 seconds
.:: Contact :: Home ::.
Powered by: FUDforum 3.0.4.