Guest User!

You are not Sophos Staff.

Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 1 reply
  • Subscribers 3 subscribers
  • Views 1982 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Firewall rule dont work --> is Webfiltering the reason?

chrizz

Hi,

i got a Question about Firewall rules, first my settings.

2x Wan with uplink balance and 4 multipath rules allowing some Network only to use 1 of the Wan, and the other can use both Uplink interfaces

Eth1 Wan 1

Eth0 Wan2=vlan91

Eth0  contains Vlan91 Vlan92 and InternalVlan1

Wlan0/1/2 APs are running via the InternalVlan1

In the end i got

Wan1 eth1

Wan2 vlan91 eth0

wlan1 APS connected via Internalvlan1

wlan2 APS connected via Internalvlan1

wlan3 APS connected via Internalvlan1

InternalVlan1 + wlan4 bridged to Internal via eth0

vlan92 via eth0

In Firewall Rules i set on TOP

wlan1 wlan2 wlan3 vlan92 ---> DROP all------>Internal

i still have acces from vlan92 wlan1 2 3 to the Internal network

(All network got diffrent IP Ranges)

Is ist even possible to block traffic in my scenario? ( And no, i cant change  the Ports or Vlan Ports, diffrent building to less physical cables :D ) 

I just tried arround with the Webfilter settings, and found out if i remove 1wlan network from the Webfilter List the access is getting blocked so it has something to do with the webfiltering :) but what setting?



This thread was automatically locked due to age.
  • 0

    Yes, chrizz, that's the reason. See #2 in Rulz.

    You might be interested in a document I maintain that I make available to members of the UTM Community, "Configure HTTP Proxy for a Network of Guests."  If you would like me to send you this document, PM me your email address. I also maintain a version auf Deutsch translated by fellow member hallowach when he and I did a major revision in 2013.

    Cheers - Bob