Zadikem, Travis-taz wrote:
> Hello all,
> Can someone please tell me the rule for blocking internet access
> from only 1 IP address to the WAN?
>
> Thanks,
> Travis
Assuming you want to lock an IP down completely - Try this:
Action: Block
Interface: LAN
Protocol: any
Source: Single host or alias
Address: <insert IP here>
Source port range from: any
to: any
Destination: any
Destination port range from: any
to: any
Log: (you may want to log where this IP is going)
Description: (as always give it a good descriptive name)
This rule needs to be listed before the default LAN -> any rule.
(First matched rule wins the race...)
If you wish to allow certain services to work (email) you could have
"Pass" rules before the block rule. It will take multiple rules to
allow traffic to specific ports/services (HTTP, HTTPS, POP3, SMTP,
FTP...)
For Example:
PASS to POP3 (110) from <IP>
PASS to SMTP (25) from <IP>
BLOCK any from <IP>
PASS any from LAN Subnet
_________________________________
James W. McKeand |