GUIDE: Using WinXP firewall to secure your server

[LeoCrasher]

[Setting up and configuring the Internet Connection Firewall]

If your computer connects directly to the internet, without the use of a router then you will want to follow this guide. If you use a router, these steps are not needed, and you can ignore this guide.

1. First goto your control panel and make sure your in classic view, next open Network Connections. Once inside right-click ur internet connection and select 'Properties'.

2. Look at the tops at the top of the window thats appeared, select 'Advanced'. From here tick the box as shown below.

NOTE: You may instead see a window asking if you want to enable the firewall or not. If this is the case, select On and goto the Advanced tab. Then tick ur internet connection, press settings on the right, and goto step 4).
3. Now click the 'Settings' button near the bottom of the window, you will now be presented with a screen SIMILAR to the one below:

4. Click the 'Add' button, where you will now be presented with this box:

5. Now fill the box with these details;
Description: M2UserCount
IP: 127.0.0.1
EXPort: 3000
INPort: 3000
TCP
6. Now repeat steps 4 and 5 using this information:
Description: M2LoginGate
IP: 127.0.0.1
EXPort: 7000
INPort: 7000
TCP
7. Repeat steps 4 and 5 again using this information:
Description: M2SelChrGate
IP: 127.0.0.1
EXPort: 7100
INPort: 7100
TCP
8. Now for the final time, repeat steps 4 and 5 with this information:
Description: M2GameServer
IP: 127.0.0.1
EXPort: 7200
INPort: 7200
TCP
8a. You should now have something that looks like this;

9. You may wish to allow other ports depending on what you want outsiders to be able to access.
10. Click OK/Apply on any dialogs you may have open. The firewall will take effect as soon as you reconnect to the internet.


[Ensuring Port 6000 is blocked when using ICF]

If you were one of the people who were asked whether to turn the firewall on, you are running a newer version of the firewall.

1. First goto your control panel and make sure your in classic view, next open Network Connections. Once inside right-click ur internet connection and select 'Properties'.

2. Click the 'Exceptions' tab.
3. Look through the list, if there is ANYTHING which relates to your m2server, then untick it.
4. Now bring your server online, and enter its IP into the 'Check Ports' section of http://www.leocrasher.co.uk/servers
5. Your wanting to see port 3000,7000,7100,7200 green, and 6000 red.

/Leo

 

[LeoCrasher]

Blocking IPs

[Setting up IPSecurity (the thing that lets you block IP addresses)]
This is a very tedious task, but only needs to be done once . If you prefer an easier solution, grab yourself a copy of ZoneAlarm or something similar!

1. Goto Start -> Run and type 'Secpol.msc' without exclamation marks.

2. You should now be presented with the Local Security Settings console.
3. Right click an empty white area in same area as shown below, and click Create IP Security Policy;

4. You will be prompted to call it something, I have chosen the below.

5. Press NEXT and then UNTICK 'Activate the default response rule'. Then press NEXT again, finally press FINISH (leave 'Edit properties' ticked).
6. You will now be presented with a screen like the below;

7. Make sure that <Dynamic> is UNTICKED, and press 'Add...'
8. Press NEXT.
9. When asked to specify a tunnel, make sure 'This rule does not specify a tunnel' is selected, then press NEXT.
10. Network type: All network connections
11. Press NEXT
12. Selec 'Use a certificate from this certification authority' and press BROWSE.
13. Select the certificate at the top of the list and press OK.
14. You should now have a window that looks like this:

15. Press NEXT
16. You should now have a list of IP filter lists, click 'Add...'
17. You will be presented with the 'IP Filter List' window, it will ask for a name which will be set to 'New IP Filter List', change it to 'MIR Blocked IPs'. For a description, enter something like 'My Mir2 servers blocked IP addresses'.
18. Click 'Add...'
19. When asked for a source address, specify 'A specific IP address', and place an example IP address inside the newly created textbox - as shown below (or the IP of someone you wish to block).

20. Press NEXT, and when prompted for a destination address, just leave it as 'Any IP Address'
21. Protocol type: ANY. Press NEXT
22. Make sure 'Edit Properties' is unticked and press FINISH.
23. You will be back at your IP Filter List window, press OK.
24. You will be back at your Security Rule Wizard window, select the circle box of the filter you just created, then press NEXT - as shown below.

25. Now you will be asked what action you wish to take on the list... we want to complety block them, but this isn't on the list so we'll have to make that too.
26. Press 'Add...', then 'NEXT'
27. Give it a name of BLOCK, and a description of 'BLOCK USERS' and press NEXT.
28. Now you will be given a choice of 3 filter actions, select 'Block' and press NEXT.
29. Make sure 'Edit properties' is unticked and press FINISH.
30. You will be back at your filter action choice, you should see that your new BLOCK option is there. Select its circle as shown below.

31. Press FINISH (leaving edit properties ticked).
32. Press OK to the 'New Rule Properties' window that has appeared.
33. A window very similar to the one below should now be shown, make sure that ur newly created rule is ticked. The press CLOSE.

34. Now assign your rule as shown below:

35. Assignment comes into effect immediatly, and does not require a restart or anything else like that.

[Adding additional IP's to block using IPSec]
Since you have created IP blocking, you can now add new IP's to block quite quickly.

1. First open IPSec as shown in "Setting up IP blocking using IPSec" Step 1.
2. Right click your secuirty policy for blocked IP's, which is likely to be called 'MirServer IP Blocking' and click Properties.
3. Select your Blocked IP filter, which is likely to be called 'MIR Blocked IP's' and press 'Edit...'.
4. Again select the filter list you created earlier, likely to be called 'MIR Blocked IPs' and press 'Edit...'.
4a. The IP filter window will now have appeared, you may wish to remove the TEST IP you added earlier, by selecting it (its in the bottom list), and press REMOVE.
5. Press ADD, then NEXT,
6. When asked for a source address select 'A specific IP Address' and enter the IP of the person you wish to ban inside the box.
7. Press NEXT, and when prompted leave the destination address as 'Any IP Address'.
8. Leave the protocol as 'Any' and press NEXT once more.
9. Leave 'Edit properties' unticked and press FINISH.
10. You will be back at your IP filtered list, press OK
11. You will be back at your Edit Rule list, press Apply, then Close/OK.
12. You will be back at your MirServer IP Blocking Properties window, Apply then Close/OK.
13. To make doubly sure its worked, right click your policy, unassign it, then reassign it again. The updates are instant.

/Leo