Dropping traffic from external ip address

Hi,

try setting up a dead end Nat, there is a kba on the subject. Also your destination network is actually an address try changing it to the network range.

ian

Google couldnt help me find anything about a dead end nat. I will keep looking. As to the destination network, i have tried several things; the destination server address both internal and external and I tried the interface. Are you suggesting it should be the internal lan network object? 

Not a google search but a sophos kba search. I apologise for not being able to assist with more details but the iPad is not a good device for searching or copying links. My main Mac is off being repaired waiting for parts.

ian

I haven't been able to find the article so I guess I will open a support ticket. To be honest I haven't even found knowledge base articles at all, just a lot of articles in no particular order.

I resolved the problem by setting the destination zones, networks and services to ANY.

I am trying to block all traffic that is both coming and going to an internal IP address (this server acts as a router for the network). so far I have tried the following: iptables -A INPUT -s 192.168.1.111 -j DROP & iptables -A OUTPUT -d 192.168.1.111 -j DROP, with 192.168.1.111 being the IP address I am trying to block traffic from. The local area network connects to br0....                Monkey.cool

I have the article, just have to figure how to make this iPad copy and past it.

ian

FirewallRulesBlackHoleDNAt