IPSec rules in Win2000 Pro

[Guest]

I am trying to make a firewall like function in Win2K Pro using ipsec. I am using a dial up internet link

I found that if you make a block rule and a permit rule, the block rule always takes precedence over the permit rule. For example, if you make a block all TCP accesses to all ports, and then make another rule to permit access to port 80, all ports still remain closed

Is this correct behaviour? Or am I mising something

Any help would be greatly appreciated

Dileep

 

[George Hester]

See if this sheds any light on what you want to do:

http://msdn.microsoft.com/library/default.asp?url=/library/en-us/dnnetsec/html/HTUseIPSec.asp

It may be that deny outweighs allow. For example in NTFS security if you set a folder so that Everyone is denied and set it so that the Administrator has Full control then no one (incl the Administrator) is able to access the folder.