This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Cant block China

Hi

I have a strange thing with my PBX going on. About 4 days ago, my PBX started uploading over the SIP port at max speed to a China server (202.107.228.147). The PBX is NATed to an external IP. I have country blocking turned on and it recognizes the IP as a china host but it does not block it. I've added that IP to firewall rules and set it to deny access, ( any -> any protocol -> that IP ) and the other way around, and set those rules as 1 and 2, No luck.

My NAT rule looks like this

Traffic selector: Any → SIP → Comcast [pbx.Acme.com] (Address)
Destination translation: (PBX Server) SIP

Do NAT rules take precedence over Firewall Rules?
I guess i could just make my NAT rules only to the trunk lines to my phone provider instead of ANY, just curious why its not getting blocked by the firewall.

Any Ideas?

This thread was automatically locked due to age.

Parents

0 scorpionking over 12 years ago

You suggested right: NAT rules com before normal firewall rules.
Cancel
Vote Up 0 Vote Down

Cancel
0 NewImage over 12 years ago in reply to scorpionking

So, the country block is ineffective to blocking access to a NATed server?

Was wondering if the automatic Firewall rules set up by a NAT are put at too high of a priority.
Would think the priority should be Country > firewall rules > firewall rules set by Nat.

Is this a Bug?
Cancel
Vote Up 0 Vote Down

Cancel
0 scorpionking over 12 years ago in reply to NewImage

You can disable the automatic firewall rule at the NAT rule and create a seperate rule instead.

I wouldn't tread this as a bug, it's by design...
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 scorpionking over 12 years ago in reply to NewImage

You can disable the automatic firewall rule at the NAT rule and create a seperate rule instead.

I wouldn't tread this as a bug, it's by design...
Cancel
Vote Up 0 Vote Down

Cancel

Children

No Data