Norton Firewall - Block aggressive Internet traffic

26 07 2004 United Kingdom

Do you find you get frequent attacks from certain IP addresses?
Such as 82.43.121.76, 82.43.125.213, 82.43.226.226, . . . . . . .

Here is how to block traffic from a range of IP addresses using Norton Firewall

But first find your own IP address, to check that you do not block your own traffic -

Open Norton Personal Firewall program:
Start – Programs - Norton Personal Firewall

1. Find your own IP address
Click: Statistics, View logs, Connections

The window will show your Local IP Address; keep a note of this.
Then close the Log Viewer window - click X in the top right corner.
This will take you back to the Norton Personal Firewall window.

Now you can set up a rule for blocking Internet traffic -

2. Click on Status and Settings
Then double-click on Personal Firewall
and click the Advanced tab at the top of the new window

3. Set up a rule to block traffic
Press: General Rules - Add

4. Add a new rule:
Click: Block, and press Next
Click: Connections from other computers, and press Next

5. Select which addresses you want to block
Click: Only the computers and sites listed below, and press Add
Click: Using a range
Enter the Internet address at the start of the range you want to block
and enter the ending address of the range
Press: OK

Check that your own IP address is not listed or included in the range of prohibited connections!
If it is included by mistake, press Back and amend the start/ending address
If you want to add another range as well – Press: Add
If you have completed the Internet addresses you want to block – Press: Next

6. What protocols do you want to block?
The default is TCP and UDP
(You can change this if you want another option)

7. What types of communication, or ports, do you want to block?
The default is ‘All types’
Press: Next

8. Choose what notifications you wish to receive
e.g. Notify me with a Security Alert
Press: Next

9. What do you want to call this rule?
Give this new rule a name, such as name of attack/intrusion and its source,
e.g. LSASS_RPC Brownbeyond deny access
Press: Next

10. What protocols do you want to block?
This shows you the settings you have created –
Press: Finish

Check your user manual and refer to an IT expert if you are in any doubt.

Otherwise, that’s sorted . . . at least until the next wave of attackers find your Internet address!

© 2004 Copyright topenterprise uk ltd All rights reserved
Property of topenterprise uk ltd and made available under the terms of use notice on this web site

Back to top of page