1

Possible Duplicate:
Ban, slowdown or stop massive login attempts to RDP

There was an interesting thread about brute-force RDP attacks and one suggested solution that I liked was "set up so 150 incorrect passwords from any given IP within 24 hours blocks that IP".

Could someone provide more info on how to block out an IP if there were too many incorrect login attempts via RDP?

PS the original thread was: Ban, slowdown or stop massive login attempts to RDP

Community
  • 1
muffintopper
  • 11
  • 1

1 Answers1

1

Simple. Dont allow RDP from the internet. Point. Dont be cheap, install a security system.

my own RDP access runs through a terminal gateway (i.e. it is http on the internet) wand a firewall with intrusion prevention - THERE you stop the crap, not downline on the server.

TomTom
  • 50,857
  • 7
  • 52
  • 134