This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

How to block outgoing traffic?

Hi!

Our firewall is set to allow all traffic from LAN to WAN.

Now I want to restrict some of this traffic. I made a new rule to block several ports, for example source port any, destination port 139.

I placed that rule before the one that allows all traffic from LAN to WAN.

When testing, the log viewer says that SOME of this traffic is blocked, SOME is allowed. Is this by design? Firewall seems to apply rules very randomly.

This thread was automatically locked due to age.

Parents

0 Kari Hyvönen over 7 years ago
Cancel
Vote Up 0 Vote Down

Cancel
0 rfcat_vk over 7 years ago in reply to Kari Hyvönen

Hi,

no the XG does not randomly apply rules. The blocking rule has to be at the top of the rule list. Please post your rule order.

You would be better of tightening your lan to wan allowed protocols.

Ian
Cancel
Vote Up 0 Vote Down

Cancel
0 Kari Hyvönen over 7 years ago in reply to rfcat_vk
Cancel
Vote Up 0 Vote Down

Cancel
0 rfcat_vk over 7 years ago in reply to Kari Hyvönen

Hi,

I think I can see the cause of what you think is random. Please remove the web and application from you reject rule.

Ian
Cancel
Vote Up 0 Vote Down

Cancel
0 Kari Hyvönen over 7 years ago in reply to rfcat_vk

How do I do that?
Cancel
Vote Up 0 Vote Down

Cancel
0 rfcat_vk over 7 years ago in reply to Kari Hyvönen

Hi,

you open the rule and change the settings to none.

Ian
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 rfcat_vk over 7 years ago in reply to Kari Hyvönen

Hi,

you open the rule and change the settings to none.

Ian
Cancel
Vote Up 0 Vote Down

Cancel

Children

0 Kari Hyvönen over 7 years ago in reply to rfcat_vk

There isnt any setting that can be set to "none"
Cancel
Vote Up 0 Vote Down

Cancel
0 Kari Hyvönen over 7 years ago in reply to rfcat_vk
Cancel
Vote Up 0 Vote Down

Cancel
0 rfcat_vk over 7 years ago in reply to Kari Hyvönen

temporarily change the rule to accept and then change the settings to none. Then change it back to reject.

Ian
Cancel
Vote Up 0 Vote Down

Cancel
0 Kari Hyvönen over 7 years ago in reply to rfcat_vk

Changed to "accept", all the settings are "none". Saved, reloaded, changed back to reject, it's still the same.
Cancel
Vote Up 0 Vote Down

Cancel