Auto IP ban through windows firewall -- 2
Budget: $30 – $250 USD
Mail server is getting attacked, I need to create a windows service constantly checking a .txt log file for preset keywords like "Failed SMTP login" or "Relay attempt" to auto block IP's.
This service should auto add/delete a new entry to a existing "inbound windows firewall rule" with the hacker's IP for a specific period of time.
A good example or a similar concept could be found here: https://www.digitalruby.com/securing-your-windows-dedicated-server/
Some of the settings that I need to control:
– Duration to ban ip address (min)
– Number of failed login attempts before ban
– Whitelist of comma separated ip addresses to never ban
– Blacklist of comma separated ip addresses to always ban
– Custom keywords, XPath and Regex to parse logs for failed login attempts
– No need to restart the service when we change settings
– Highly configurable, ban anything that comes through a log file.
This service should auto add/delete a new entry to a existing "inbound windows firewall rule" with the hacker's IP for a specific period of time.
A good example or a similar concept could be found here: https://www.digitalruby.com/securing-your-windows-dedicated-server/
Some of the settings that I need to control:
– Duration to ban ip address (min)
– Number of failed login attempts before ban
– Whitelist of comma separated ip addresses to never ban
– Blacklist of comma separated ip addresses to always ban
– Custom keywords, XPath and Regex to parse logs for failed login attempts
– No need to restart the service when we change settings
– Highly configurable, ban anything that comes through a log file.