On Thu, Jan 14, 2010 at 1:26 PM, Brieseneck, Arne, VF-Group
<Arne dot Brieseneck at vodafone dot com> wrote:

> GUI is supposed to run only on LAN interface, but is accessible from
> everywhere.

When you create a new rule in the firewall it only applies to new
connections. You may have done it correctly but OPT1 still has access
if a connection existed prior to applying the new rule. Try resetting
the firewall state table and test again.

db