Windows Firewall - blocking hundreds of IPs

[Izi]

Does anyone know a quick way of blocking hundreds of IP addresses through windows Firewall? (Rather than one at a time)

I basically need to block all search engines from indexing a development server. I know there are other ways such as robots.txt but these files keep getting overwritten and forgot about.

Other solutions welcomed. We do have a draytek router/firewall but couldn't see a quick way of doing it this way either.

 

[matthab]

Silly question but whys a development server internet facing?

You should be, Testing/staging then once happy upload to the public web server.

You will be there all day blocking search IP's as there are loads of them. If you have a range you could block the subnet.

 

[morfmedia]

You'll be best off doing it command line, use excel to build the script

 

[ruffneck]

if its a dev server why don't you just block everything apart from what you want to allow?

 

[Rroff]

password protect it from root down? your never gonna be able to stop everything that can possibly index it. Or setup filtering rules to only permit allowed IPs.

 

[HarryPainful]

block everything apart from what you want to allow?

THIS!

This is how you configure firewalls, not the other way around!!

 

[Izi]

Its a staging server for clients to view changes, not dev server sorry.

I will try from command line.

 

[Izi]

THIS!

This is how you configure firewalls, not the other way around!!

some clients have dynamic IPs

EDIT: Also before anyone asks, I can't password protect it because of call backs from thirdparty systems. However I may password protect it with basic auth, then enable anonymous auth when required tested of those parts of the apps.

 

[two00lbwaster]

meta tag

http://www.seoconsultants.com/meta-tags/robots/

use just about all the options

 

[smargh]

alias robots.txt to a location outside the path of all other contents.

 

[matthab]

If it was me I would set up a VPN and give users access. Means its not internet facing but your customers can still look at it.

This can be locked down to give them access where you want. This can be done through Windows server or the better way would be using an appliance. i.e a PIX/ASA