This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Block bad IPs via DNAT or firwall rule?

Hello,

what would be the best way to block bad IP hosts trying to access my networks?
Via DNAT (blackhole) or firewall rule?
What are the advantages or disadvantages?

Regards
UTMaddict

This thread was automatically locked due to age.

Parents

0 emmosophos over 4 years ago

Hello UTMaddict,

Thank you for contacting the Sophos Community!

That would depend, in order for a connection to be able to access your Firewall you need to have a rule in place, if you have a WAF rule or DNAT that allows certain service, the best is to add the IPs you trust to this DNAT. So usually you will want to have a Blackhole DNAT for any IP that might be trying to access any of your open ports.

Regards,

Emmanuel (EmmoSophos)

Technical Team Lead, Global Community Support
Sophos Support Videos | Product Documentation | @SophosSupport | Sign up for SMS Alerts
If a post solves your question use the 'Verify Answer' link.
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 emmosophos over 4 years ago

Hello UTMaddict,

Thank you for contacting the Sophos Community!

That would depend, in order for a connection to be able to access your Firewall you need to have a rule in place, if you have a WAF rule or DNAT that allows certain service, the best is to add the IPs you trust to this DNAT. So usually you will want to have a Blackhole DNAT for any IP that might be trying to access any of your open ports.

Regards,

Emmanuel (EmmoSophos)

Technical Team Lead, Global Community Support
Sophos Support Videos | Product Documentation | @SophosSupport | Sign up for SMS Alerts
If a post solves your question use the 'Verify Answer' link.
Cancel
Vote Up 0 Vote Down

Cancel

Children

No Data