Hallo, Sejak Kerio Control Firewall 9.2.2 build 2172 ada fitur baru yang namanya "Geo-IP Filtering". Geo-IP filtering menjadi kebutuhan sekarang ini untuk mengurangi hacking attack dari negara-2x diluar Indonesia.
http://www.networkworld.com/article/2844575/network-security/next-generation-geo-ip-filtering-can-be-fine-tuned-to-vastly-reduce-unwanted-and-malicious-traffic.html --- Companies like Norse and Akamai track the source IP of Internet attack traffic and compile lists showing the top offending regions. According to Akamai, in one recent quarter 84% of the observed attack traffic was generated from within just ten countries. If you know a majority of attacks are originating from a handful of countries, why not configure firewalls to reject traffic coming from and going to those specific countries? The fact is, it's not practical to shut off an entire country because there could be a legitimate need to interact with people or systems in those areas. --- Caranya sbb: http://manuals.gfi.com/en/kerio/control/content/security/blocking-all-incoming-connections-from-specified-countries-in-kerio-control-1973.html Dari Webadmin masuk ke menu Security Setting -> GeoIP Filter [x] Block incoming traffic from following countries Pilih daftar negara yang akan diblock, lalu apply. Kalau masih ada attack attempt dari negara yang tidak/belum masuk dalam daftar blocking maka buat/aktifkan Traffic Rule "Banned IP" Rule Name: Banned IP Source: Hacker Group of IP Destination: Firewall, Internet Interface Service : ANY IPversion: ANY Action: Deny Buat IP Address Group yang namanya "Hacker Group of IP" dari menu Definition -> IP address group. Untuk memeriksa asal IP bisa lihat dari https://www.whatismyip.com/ip-whois-lookup/ https://www.whois.com/whois/ -- syafril ------- Syafril Hermansyah -- keriocontrol -------------------------------------------------- Subscribe: <mailto: kcontrol-subscr...@kerio.dutaint.com> Unsubscribe: <mailto: kcontrol-unsubscr...@kerio.dutaint.com> Archive : http://kcontrol.kerio.dutaint.com Latest Version: 9.2.2
