Hi,
We want to block the access to our internal websites from some IP address, I did follow the suggestion of our good frind BAlfson and did this:
Create a new DNAT Rule and there create a group that has all IP's that must be blocked then use ANY for the services and use ANY for the going to (because the WAN port has multipal IP's) and for the destnation did create a network Host with IP that is not exsit.
right now the position of the rule is down the list at number 121, should we move the rule to the Top of the DNAT rules? or just leave it there at 121 position?
DNAT : {group of bad IPs} -> Any -> {group of WAN (Address) objects} : to {non-existent IP}
This thread was automatically locked due to age.
