Firewall exemption rule

[navidz]

I have just started learning to use advanced features in windows server firewall and my question may sounds silly.

Basically I want to block all incoming traffics to the server except for a range of ip addresses. I can define an inbound rule to block all traffics from any IP adresses. Then I thought I can just define another rule to allow incoming traffics from a range of IP adresses but it wasn't successfull. I just realized that windows firewall overirde the allowing rules with any blocking rules.

Is there a way to define an inbound rule and exempt an IP range? I have read a little bit about Authentication bypass but Ihave no idea if it's applicable or how I can use it. I appreciate any help on this issue.

[navidz]

I've just found a way which is kind of weird but works for my problem.

Let's say I want to block all ports and traffics for all IP addresses except for this range:

 

193.82.10.0-193.82.10.255

 

I created an inbound rule to completely block these IP ranges:

 

10.0.0.0-193.82.9.255

193.82.11.0-255.255.254.255

 

Sounds funny but it works. Anybody has a better solution?