Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 9 replies
  • Subscribers 2 subscribers
  • Views 2126 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Howto prevent access to DMZ

ECKEROTH
Is there a way to create a rule that allows control over access to my DMZ? 

Internal lan is masq on internet. No masq on DMZ.
Have a rule like this:

internal ->  -> any -> ALLOW

ANY is my problem. Thats give access to DMZ. How do i make a rule that only make access from internal to internet ?


This thread was automatically locked due to age.
Parents Reply
  • 0 in reply to ECKEROTH
    You need to put your internal network allow rule below the drop rule, then place the allowed connections between your internal and DMZ rules above the drop rule.  So in the end the allow any rule is last as a catch all for the internal network however the catch all going to the DMZ from Internal will cause a drop.
Children