Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 2 replies
  • Subscribers 2 subscribers
  • Views 392 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

[6.311] Keeping away from the internet

trialrider
Hi there again,

here we what to create some pf rules to keeping computers away from the internet.

At first I tried with a single IP address. I want to block this for all services to any destination. The rule is on 4th position:

1. Dropped Any to Internal (Broadcast) for any services
2. Dropped Any to 255.255.255.255 for any services
3. Dropped 255.255.255.255 to Any for any services
4. Dropped (Sinlge IP) to Any for any services

The computer on this IP can access the internet... AFAIR the rules will be  read from top to bottom and if one rules will be true all other will be ignored.

Our IP's are in ***. The ASG is in transparent mode for HTTP proxy. Maybe I should block traffic?

Thanks in advance for your help.
-- 
Kind regards

Steffen Kother


This thread was automatically locked due to age.
Parents
  • 0
    Hmm, sounds like the HTTP proxy is taking priority over the packet filter rules? I've never tried to block a client like that before. If you disable the transparent proxy temporarily, does that work?
Reply
  • 0
    Hmm, sounds like the HTTP proxy is taking priority over the packet filter rules? I've never tried to block a client like that before. If you disable the transparent proxy temporarily, does that work?
Children