IP range firewall

[Seth 2]

How do I setup IP range? I want to add 2 IPs to be blocked and every IP between them too? Is this possible with ESS 9?

[itman 1,659]

How do I setup IP range? I want to add 2 IPs to be blocked and every IP between them too? Is this possible with ESS 9?

Yes. Just use a dash between the two IP addresses. For example, 196.1.1.1-196.1.1.255.

[Seth 2]

I added Google IP to firewall to block it only for testing. I created a rule that deny both inbound and outbound traffic but I still could access Google IP. What did I do wrong? I'm trying to block IPs not URLs.

Edited August 26, 2016 by Seth

[Marcos 5,070]

If you used Google for testing, did you block all the IP ranges they use? You'd better use a domain that resolves to one IP addresses in one range for testing if you do not know all the ranges.
 
64.233.160.0 - 64.233.191.255

66.102.0.0 - 66.102.15.255

66.249.64.0 - 66.249.95.255

72.14.192.0 - 72.14.255.255

74.125.0.0 - 74.125.255.255

209.85.128.0 - 209.85.255.255

216.239.32.0 - 216.239.63.255

[itman 1,659]

Actually it uses a few more IP address per Robtex.

 

Records

 

Displays various information related to AS, BGP, Routes and Location.

Base Record Preference Name IP Number Reverse Routes AS

 

Location www.google.com A  

 

www.google.com 74.125.24.99 de-in-f99.1e100.net 74.125.24.0/24 Google GOOGLE AS15169 Google Google, Inc Mountain View, United States

 

74.125.24.103 de-in-f103.1e100.net 74.125.24.104 de-in-f104.1e100.net 74.125.24.105 de-in-f105.1e100.net 74.125.24.106 de-in-f106.1e100.net 74.125.24.147 de-in-f147.1e100.net 173.194.33.112 sea09s16-in-f16.1e100.net 173.194.33.0/24 Google GOOGLE 173.194.33.113 sea09s16-in-f17.1e100.net 173.194.33.114 sea09s16-in-f18.1e100.net 173.194.33.115 sea09s16-in-f19.1e100.net 173.194.33.116 sea09s16-in-f20.1e100.net 173.194.117.144 nrt04s09-in-f16.1e100.net 173.194.117.0/24 Google GOOGLE 173.194.117.145 nrt04s09-in-f17.1e100.net 173.194.117.146 nrt04s09-in-f18.1e100.net 173.194.117.147 nrt04s09-in-f19.1e100.net 173.194.117.148 nrt04s09-in-f20.1e100.net 173.194.118.80 gru09s09-in-f16.1e100.net 173.194.118.0/24 Google GOOGLE 173.194.118.81 gru09s09-in-f17.1e100.net 173.194.118.82 gru09s09-in-f18.1e100.net 173.194.118.83 gru09s09-in-f19.1e100.net 173.194.118.84 gru09s09-in-f20.1e100.net 173.194.121.16 iad23s25-in-f16.1e100.net 173.194.121.0/24 Google GOOGLE 173.194.121.17 iad23s25-in-f17.1e100.net 173.194.121.18 iad23s25-in-f18.1e100.net 173.194.121.19 iad23s25-in-f19.1e100.net 173.194.121.20 iad23s25-in-f20.1e100.net 216.58.192.4 nuq04s29-in-f4.1e100.net 216.58.192.0/19 216.58.192.0/24 Google GOOGLE 216.58.196.132 sin01s18-in-f132.1e100.net sin01s18-in-f4.1e100.net 216.58.198.164   216.58.220.132 syd09s01-in-f132.1e100.net syd09s01-in-f4.1e100.net 216.58.220.0/24 Google GOOGLE google.com google.com 74.125.24.100 de-in-f100.1e100.net 74.125.24.0/24 Google GOOGLE 74.125.24.101 de-in-f101.1e100.net 74.125.24.102 de-in-f102.1e100.net 74.125.24.113 de-in-f113.1e100.net 74.125.24.138 de-in-f138.1e100.net 74.125.24.139 de-in-f139.1e100.net 74.125.28.100 pc-in-f100.1e100.net 74.125.28.0/24 Google GOOGLE 74.125.28.101 pc-in-f101.1e100.net 74.125.28.102 pc-in-f102.1e100.net 74.125.28.113 pc-in-f113.1e100.net 74.125.28.138 pc-in-f138.1e100.net 74.125.28.139 pc-in-f139.1e100.net 74.125.29.100 qg-in-f100.1e100.net 74.125.29.0/24 Google GOOGLE 74.125.29.101 qg-in-f101.1e100.net 74.125.29.102 qg-in-f102.1e100.net 74.125.29.113 qg-in-f113.1e100.net 74.125.29.138 qg-in-f138.1e100.net 74.125.29.139 qg-in-f139.1e100.net 173.194.117.96 sin01s17-in-f0.1e100.net 173.194.117.0/24 Google GOOGLE 173.194.117.97 sin01s17-in-f1.1e100.net 173.194.117.98 sin01s17-in-f2.1e100.net 173.194.117.99 sin01s17-in-f3.1e100.net 173.194.117.100 sin01s17-in-f4.1e100.net 173.194.117.101 sin01s17-in-f5.1e100.net 173.194.117.102 sin01s17-in-f6.1e100.net 173.194.117.103 sin01s17-in-f7.1e100.net 173.194.117.104 sin01s17-in-f8.1e100.net 173.194.117.105 sin01s17-in-f9.1e100.net 173.194.117.110 sin01s17-in-f14.1e100.net 173.194.117.128 nrt04s09-in-f0.1e100.net 173.194.117.129 nrt04s09-in-f1.1e100.net 173.194.117.130 nrt04s09-in-f2.1e100.net 173.194.117.131 nrt04s09-in-f3.1e100.net 173.194.117.132 nrt04s09-in-f4.1e100.net 173.194.117.133 nrt04s09-in-f5.1e100.net 173.194.117.134 nrt04s09-in-f6.1e100.net 173.194.117.135 nrt04s09-in-f7.1e100.net 173.194.117.136 nrt04s09-in-f8.1e100.net 173.194.117.137 nrt04s09-in-f9.1e100.net 173.194.117.142 nrt04s09-in-f14.1e100.net 173.194.118.64 gru09s09-in-f0.1e100.net 173.194.118.0/24 Google GOOGLE 173.194.118.65 gru09s09-in-f1.1e100.net 173.194.118.66 gru09s09-in-f2.1e100.net 173.194.118.67 gru09s09-in-f3.1e100.net 173.194.118.68 gru09s09-in-f4.1e100.net 173.194.118.69 gru09s09-in-f5.1e100.net 173.194.118.70 gru09s09-in-f6.1e100.net 173.194.118.71 gru09s09-in-f7.1e100.net 173.194.118.72 gru09s09-in-f8.1e100.net 173.194.118.73 gru09s09-in-f9.1e100.net 173.194.118.78 gru09s09-in-f14.1e100.net 216.58.194.206   216.58.192.0/19 216.58.194.0/24 Google GOOGLE 216.58.216.142 sea15s01-in-f14.1e100.net sea15s01-in-f142.1e100.net 216.58.216.0/24 Google GOOGLE 216.58.220.142 syd09s01-in-f14.1e100.net syd09s01-in-f142.1e100.net 216.58.220.0/24

 

Google GOOGLE NS ns1.google.com 216.239.32.10 ns1.google.com 216.239.32.0/24

 

Google GOOGLE NS (primary) ns2.google.com 216.239.34.10 ns2.google.com 216.239.34.0/24

 

Google GOOGLE NS ns3.google.com 216.239.36.10 ns3.google.com 216.239.36.0/24

 

Google GOOGLE ns4.google.com 216.239.38.10 ns4.google.com 216.239.38.0/24 Google GOOGLE MX

 

aspmx.l.google.com 64.233.189.27 tl-in-f27.1e100.net 64.233.189.0/24 Google GOOGLE 74.125.21.26 yv-in-f26.1e100.net 74.125.21.0/24 Google GOOGLE 74.125.24.27 de-in-f27.1e100.net 74.125.24.0/24 Google GOOGLE 74.125.28.27 pc-in-f27.1e100.net 74.125.28.0/24 Google GOOGLE 74.125.29.27 qg-in-f27.1e100.net 74.125.29.0/24 Google GOOGLE 74.125.200.27 sa-in-f27.1e100.net 74.125.200.0/24 Google GOOGLE 173.194.72.27 tf-in-f27.1e100.net 173.194.72.0/24 Google GOOGLE 173.194.79.27 pb-in-f27.1e100.net 173.194.0.0/16 173.194.79.0/24 Google GOOGLE alt1.aspmx.l.google.com 64.233.166.26 wm-in-f26.1e100.net 64.233.166.0/24 Google GOOGLE 64.233.182.27 is-in-f27.1e100.net 64.233.182.0/24 Google GOOGLE Taoyüan, Taiwan 64.233.190.26 ce-in-f26.1e100.net 64.233.190.0/24 Google GOOGLE Mountain View, United States 74.125.25.26 pa-in-f26.1e100.net 74.125.25.0/24 Google GOOGLE 74.125.142.26 ie-in-f26.1e100.net 74.125.142.0/24 Google GOOGLE 173.194.65.26 ee-in-f26.1e100.net 173.194.65.0/24 Google - 173.194.72.26 tf-in-f26.1e100.net 173.194.72.0/24 Google GOOGLE alt2.aspmx.l.google.com 74.125.24.27 de-in-f27.1e100.net 74.125.24.0/24 Google GOOGLE 74.125.25.27 pa-in-f27.1e100.net 74.125.25.0/24 Google - 74.125.68.26 sc-in-f26.1e100.net 74.125.68.0/24 Google GOOGLE 74.125.142.27 ie-in-f27.1e100.net 74.125.142.0/24 Google GOOGLE 173.194.65.27 ee-in-f27.1e100.net 173.194.65.0/24 Google GOOGLE 173.194.71.27 lb-in-f27.1e100.net 173.194.0.0/16 173.194.71.0/24 Google GOOGLE 173.194.219.27 ya-in-f27.1e100.net 173.194.219.0/24 Google GOOGLE alt3.aspmx.l.google.com 64.233.184.27 wa-in-f27.1e100.net 64.233.184.0/24 Google GOOGLE 64.233.189.27 tl-in-f27.1e100.net 64.233.189.0/24 Google GOOGLE 74.125.21.27 yv-in-f27.1e100.net 74.125.21.0/24 Google GOOGLE 74.125.68.27 sc-in-f27.1e100.net 74.125.68.0/24 Google GOOGLE 74.125.142.27 ie-in-f27.1e100.net 74.125.142.0/24 Google GOOGLE 173.194.71.27 lb-in-f27.1e100.net 173.194.0.0/16 173.194.71.0/24 Google GOOGLE 173.194.77.27 ob-in-f27.1e100.net 173.194.77.0/24 Google GOOGLE 173.194.208.27 ql-in-f27.1e100.net 173.194.208.0/24 Google GOOGLE alt4.aspmx.l.google.com 74.125.23.26 tg-in-f26.1e100.net 74.125.23.0/24 Google GOOGLE 74.125.68.26 sc-in-f26.1e100.net 74.125.68.0/24 Google GOOGLE 74.125.136.26 ea-in-f26.1e100.net 74.125.136.0/24 Google GOOGLE 74.125.141.26 vl-in-f26.1e100.net 74.125.141.0/24 Google GOOGLE 74.125.142.26 ie-in-f26.1e100.net 74.125.142.0/24 Google GOOGLE 173.194.72.26 tf-in-f26.1e100.net 173.194.72.0/24 Google GOOGLE 173.194.208.26 ql-in-f26.1e100.net 173.194.208.0/24 Google GOOGLE 173.194.219.26 ya-in-f26.1e100.net 173.194.219.0/24 Google GOOGLE

Edited August 26, 2016 by itman

[Seth 2]

If you used Google for testing, did you block all the IP ranges they use? You'd better use a domain that resolves to one IP addresses in one range for testing if you do not know all the ranges.

 

64.233.160.0 - 64.233.191.255

66.102.0.0 - 66.102.15.255

66.249.64.0 - 66.249.95.255

72.14.192.0 - 72.14.255.255

74.125.0.0 - 74.125.255.255

209.85.128.0 - 209.85.255.255

216.239.32.0 - 216.239.63.255

I used all those IP ranges and it did not work. What is the IP number for this forum? I can check if it blocks. Doesn't matter if it's another site/IP.

 

1. Does it matter if you put space between IP and - ?

2. Should it still work if the first IP number are not same. For example: 66.xx.xx.xx - 200.xx.xx.xx <--- Would this till work?

[itman 1,659]

There is an easier way to do this. Do the following:

 

1. In Eset's GUI, access Internet Protection.

 

2. Then access Web Access Protection by clicking on the wheel symbol.

 

3. Click on URL Address Management. Then click on Edit.

 

4. Click on List of blocked addresses. Then click on Edit.

 

5. Enable(checkmarked) the List active setting.

 

6. Click on Add. Then enter "*.google.com/*" w/o the quotes.

 

7. Click on OK on that screen and every screen displayed as you exit the Eset GUI.

 

8. Repeat steps 1 - 4 to ensure you set up everything OK.

 

This will use Eset's network filtering to block access to any domain associated with Google.

[Seth 2]

There is an easier way to do this. Do the following:

 

1. In Eset's GUI, access Internet Protection.

 

2. Then access Web Access Protection by clicking on the wheel symbol.

 

3. Click on URL Address Management. Then click on Edit.

 

4. Click on List of blocked addresses. Then click on Edit.

 

5. Enable(checkmarked) the List active setting.

 

6. Click on Add. Then enter "*.google.com/*" w/o the quotes.

 

7. Click on OK on that screen and every screen displayed as you exit the Eset GUI.

 

8. Repeat steps 1 - 4 to ensure you set up everything OK.

 

This will use Eset's network filtering to block access to any domain associated with Google.

I have a few thousand IP I want to block. Doing your suggestion would mean that I have to check every IP for domain name because they are not same. That would take very long time hence the IP ranges.

I looked up this forum IP and found this IP: 52.21.38.34 I'm not sure if it's correct IP but it did not work blocking it from Eset firewall.

[itman 1,659]

 

I have a few thousand IP I want to block. Doing your suggestion would mean that I have to check every IP for domain name because they are not same. That would take very long time hence the IP ranges.

 

I looked up this forum IP and found this IP: 52.21.38.34 I'm not sure if it's correct IP but it did not work blocking it from Eset firewall.

 

It would help if you would fully describe what you are trying to do. Obviously, you want to block more than just IPs associated specifically with google.com.

 

Sounds to me that you would be better suited using one of the free Hosts file list available on the web such as here: hxxp://winhelp2002.mvps.org/hosts.htm . You can do same by just adding all the IP addresses you want to block to the Win hosts file.

 

Strange .......... Ver. 8 used to have an IP address based list capability that seems to have been removed in ver. 9?

Edited August 26, 2016 by itman

[Marcos 5,070]

Strange .......... Ver. 8 used to have an IP address based list capability that seems to have been removed in ver. 9?

 

Not sure what you mean. V8 does not support importing a list of remote IP addresses when creating a rule either.

[Seth 2]

 

 

I have a few thousand IP I want to block. Doing your suggestion would mean that I have to check every IP for domain name because they are not same. That would take very long time hence the IP ranges.

 

I looked up this forum IP and found this IP: 52.21.38.34 I'm not sure if it's correct IP but it did not work blocking it from Eset firewall.

 

It would help if you would fully describe what you are trying to do. Obviously, you want to block more than just IPs associated specifically with google.com.

 

Sounds to me that you would be better suited using one of the free Hosts file list available on the web such as here: hxxp://winhelp2002.mvps.org/hosts.htm . You can do same by just adding all the IP addresses you want to block to the Win hosts file.

 

Strange .......... Ver. 8 used to have an IP address based list capability that seems to have been removed in ver. 9?

 

I'm trying to block Telemetry IP from Microsoft. So you mean adding all IP list just the way they are to Hosts file would work? How stable would that be compared to firewall?

But ESS9 has a firewall. Doesn't it work for blocking IPs?

 

Do you know an IP and domain name I can test?

[itman 1,659]

 

Strange .......... Ver. 8 used to have an IP address based list capability that seems to have been removed in ver. 9?

 

Not sure what you mean. V8 does not support importing a list of remote IP addresses when creating a rule either.

 

You're correct. The only IP address support ver. 8 has is for SSL protocol exclusions. Blocking stuff like this by IP address is an effort in futility since Microsoft is always switching servers they use.

Edited August 27, 2016 by itman

[itman 1,659]

I'm trying to block Telemetry IP from Microsoft

 

Easiest way to do this is to use one of the third party Win 10 privacy tools. I use this one: https://www.oo-software.com/en/shutup10

 

Blocking stuff like this by IP address is an effort in futility since Microsoft is always switching the servers they use.

Edited August 27, 2016 by itman