My Windows Small Business Server 2003 sends me a performance and monitoring report daily. Almost every day there’s a single IP address trying hundreds of times to log into my server as the Administrator. I tried blocking ALL ports inbound and out for the specific IP address and it isn’t working. He’s back in the logs the next day and almost every day after. What am I doing wrong?
It should be enough to create the single rule with NeT Firewall to block the specific IP address (create the DENY rule which specifies the source IP and leave all other fields unchanged).
If you still have problem with it then could you please send some screenshots (firewall rules, log) to support(at)ntkernel.com?