Re: Blocking RDP attempts

Hi Roger -

On Tue, 10 Jan 2012 14:10:47 -0600, "Roger Vicker, CCP"
<rv-tech@xxxxxxxxxx> wrote:

Blocking RDP from all but a few IPs isn't really viable as when we are
outside we are mobile and seldom know ahead of time what IP we will be
using.

What countries are the invalid login attempts coming from?

What countries are legitimate users going to be logging in from?

I.e. if all legitimate logins are from the IP addresses assigned by
ARIN (which is basically the U.S. and Canada), then you could block
huge chunks of IP addresses that get assigned by LACNIC (Latin America
and Caribbean), RIPE (Europe), APNIC (Asia/Pacific), and AfriNIC
(Africa).

Ken
Opinions expressed are my own and do not necessarily represent the views
of my employer or anyone in their right mind.