How to drop packets in Win2K ?

[Satish S. Joshi]

Hi,

This may appear as a newbie question, so please bear with me :-D

Windows 2000 allows static routes to be defined. e.g. if the network
192.168.4.0 / 255.255.255.0 is to be reached via 192.168.1.1, the following
command can be used:

route -p add 192.168.4.0 mask 255.255.255.0 192.168.1.1

My question is: I need to just drop all the packets that are destined for a
particular network. e.g. 192.168.5.0. How do I do this ? Is there a concept
of 'nul' interface in Windows (like certain routers) that can be used for
such a purpose ?

Any help will be much appreciated.

Regards,
Satish S. Joshi

 

[Alan Wood [MSFT]]

Hi Satish,
I'm not real sure if there are other requirements, but you can use
Filters to block packets going to or coming from a certian subnet in IPSEC
Filters(no actual ipsec being used just as to filter certian packets) or
RRAS packet filters.


With the data you supplied I would go with the RRAS filter. I would also
just ahead and use the RRAS UI to create the packet filters and static
routes.

Just to Routing and Remote Access in the Admin Tools. Right click choose
configure, choose to configure as just a router and choose defaults. Once
RRAS is enabled, go to IPROUTING|GENERAL you will see your interfaces
listed, choose the interface and you can then set the filter, the IP
address will be entire subnet that you don't want to let through.
Let me know if you have any problems.

The help files on the Packet Filter are very useful.

Hope this Helps!
Alan Wood[MSFT]

This posting is provided "AS IS" with no warranties, and confers no rights.