Ah, the old "tiny, thin, and robust" solution. Doubt you'll find that. But,
all the suggestions given will work, and should not have any noticeable
affect on network performance if implemented properly. They will have some
affect, but my guess is that it will be much less than the current traffic
being created by having unrestricted RDP availability.

T

----- Original Message -----
From: "Toto A Atmojo" <toto (at) playon.co (dot) id [email concealed]>
To: <focus-ms (at) securityfocus (dot) com [email concealed]>
Sent: Monday, September 20, 2004 2:59 AM
Subject: RE: Restrict Clinet IP address on Terminal Service

Thanks for all the comment.
FYI, my server is a really bussy server wirth network traffic. So I'm afraid
that if I implement the firewall or IPSEC maybe, these will filter all the
incoming traffic (Yes that's the firewall job right). So it will decrease
network performance on my machine.

All I want to do is just put the 'guard' on RDP port 3389 for inspecting
traffic only want to connect to that particular port.
This guard will kill if the traffic is not from the 'allow' source.

Is it possible?
Or is there any tiny, thin and robust third party firewall product for this
purpose?

Any suggestion would be appreciate.

Thanks

-----Original Message-----
From: Depp, Dennis M. [mailto:deppdm (at) ornl (dot) gov [email concealed]]
Sent: Friday, September 17, 2004 9:32 PM
To: Toto A Atmojo; focus-ms (at) securityfocus (dot) com [email concealed]
Subject: RE: Restrict Clinet IP address on Terminal Service

You can use IPSEC to limit the access to this machine of the RDP port (3389)

Dennis

> -----Original Message-----
> From: Toto A Atmojo [mailto:toto (at) playon.co (dot) id [email concealed]]
> Sent: Thursday, September 16, 2004 2:41 AM
> To: focus-ms (at) securityfocus (dot) com [email concealed]
> Subject: Restrict Clinet IP address on Terminal Service
>
> Hello all,
> I have a question on restricting client connection to access terminal
> service (Remote Desktop) on Windows 2003.
> Can we just allowing only 1 IP (or some IPs) to connect to
> our server that
> provide Remote Desktop?
> Is there any Original setting on Windows to do that (Without
> configuring on
> third party firewall / tools)?
>
> Thanks
>
>
>
> --------------------------------------------------------------
> -------------
> --------------------------------------------------------------
> -------------
>
>

------------------------------------------------------------------------
---
------------------------------------------------------------------------
---

------------------------------------------------------------------------
---
------------------------------------------------------------------------
---

------------------------------------------------------------------------
---
------------------------------------------------------------------------
---

[ reply ]