Block IP With Firewall - Priority over Automatic Rules

Question

Hi All, 
 
 Hopefully someone can help. 
 We've got a generic NAT rule to do the following: 
 
 DNAT 
 Any IPv4 > RemoteDesktop (3389) > External WAN Address 
 Translate to: Our Terminal Server Port 3389 
 Automatic Firewall Rule - enabled 
 
 We have been noticing brute forcers trying to get into the server and attempting to guess the passwords, we want to stop this at the UTM level. 
 
 I made a rule to block these IP addresses and moved it to what I thought was the top of the Firewall rules only to see Auto rules taking precedence. 
 
 EDIT: I've just noticed in the logs they are getting allowed through based on the NAT rule and not getting affected by the Firewall rule - so any help would be appreciated.

Billybob · Accepted Answer

Please refer to the RULZ doc by BAlfson for better understanding and refer to rule2. For your purposes, you will have to create another DNAT rule for the offending IP and direct it to a non existing IP (blackhole). Hope that helps.

rsenio · Answer

Exactly what billybob stated. DNAT rule to circumvent the firewall rule as per my screenshot

Block IP With Firewall - Priority over Automatic Rules

Submitted a Tech Support Case lately from the Support Portal?