how do I block putty without blocking FTP

[amartin99]

hello

my RDP servers are being attacked (apparently with putty)
I know I can block the attack by activating windows firewall
but that also blocks FTP

 

[jackckingjill]

Martin...this link (youtube) will guide you how to access FTP with putty using command prompt window. Try this..sorry if you are not looking for this one.

URL - [ame]http://www.youtube.com/watch?v=Sd8JqBw3eJw[/ame]

 

[amartin99]

intresting
but no im looking to prevent putty
not to use it better myself

 

[WizzUpload]

You are defo not attacked by putty, that's just a software. People are using that software to connect on servers via SSH/telnet etc and uses that to attack you.

 

[amartin99]

im not blaming putty itself
just looking for a way to block it

 

[mRAza]

As WizzUpload said you need to block ssh/telnet protocol access, putty is just a software to connect via that protocol. you can also restrict login via ssh just from your IP, Search these terms on google you will find a lot of tutorials on how to do it: "block ssh by ip" or "block ssh brute force" or "ssh access disable"

 

[casesensitive]

putty

you can disable ssh by following command
iptables -A INPUT -p tcp --dport 22 -j DROP

 

[amartin99]

THANKS
but I tried putting that in the command prompt and it's not redesigning the command

hmmm I was just reading the telnet uses port 21
that's the default FTP port

 

[casesensitive]

hmm

ssh is port 22 .. ftp is 21..
running the cmd i gave will block SSH access you might want to add your IP so it only allows u access

 

[amartin99]

well I dono what im doing wrong

C:\Users\Administrator>-A INPUT -p tcp --dport 22 -j DROP
'-A' is not recognized as an internal or external command,
operable program or batch file.



C:\Users\Administrator>iptables -A INPUT -p tcp --dport 22 -j DROP
'iptables' is not recognized as an internal or external command,
operable program or batch file.

 

[casesensitive]

lol

lol the command i gave you was for linux not windows bro

 

[HH-Abdullah]

You can start the windows firewall and add a specific 'allow' rule for FTP. Search "open port in windows firewall" and you will get many good guides. This also explains it: http://windows.microsoft.com/en-US/windows-vista/Open-a-port-in-Windows-Firewall

Best of luck!

 

[sat_cse28]

are you trying to ssh windows machine

or from a windows machine?

 

[LitZ]

Windows CLI: netsh advfirewall firewall delete rule name=blockssh name protocol=TCP localport=22

*NIX CLI: iptables -A INPUT -p tcp --dport 22 -j DROP

LitZ

 

[amartin99]

hmmm
you clearly know what your talking about
but I don't