Astaro User Bulletin Board
Go Back   Astaro User Bulletin Board > Astaro Gateway Products > Network Security: Firewall, NAT, QoS, IPS and more
Reload this Page can not block traffic
Register FAQ Members List Calendar Search Today's Posts Mark Forums Read

Welcome to the Astaro User Bulletin Board.
If this is your first visit, be sure to check out the FAQ by clicking the link above. You may have to register before you can post: click the register link above to proceed. To start viewing messages, select the forum that you want to visit from the selection below.

Reply
 
LinkBack Thread Tools Display Modes
  #1 (permalink)  
Old 02-20-2004, 01:54 AM
Senior Member
  
Join Date: Apr 2002
Location: Germany
Posts: 196
Default can not block traffic
hi @ all
i cant block traffic with astaro 4.20..

in networks i have serveral ip īs i like to block..
i.e. 192.168.0.1 and 192.168.2.1

i made a network group for those ipīs, so far so good...

now packet filter

from (client) any
service any
to (server)
ipīs i like to block
action drop

i also tried it with reverse settings

nothing happens...


where is the trick i dont see
Reply With Quote
  #2 (permalink)  
Old 02-20-2004, 02:37 AM
Member
  
Join Date: Jan 2004
Location: St.Louis, MO USA
Posts: 92
Default Re: can not block traffic
[ QUOTE ]
hi @ all
i cant block traffic with astaro 4.20..

in networks i have serveral ip īs i like to block..
i.e. 192.168.0.1 and 192.168.2.1

i made a network group for those ipīs, so far so good...

now packet filter

from (client) any
service any
to (server)
ipīs i like to block
action drop

i also tried it with reverse settings

nothing happens...


where is the trick i dont see


[/ QUOTE ]


You said that you want to block them but according to what you wrote you used "Drop" how about trying "Reject" instead of "Drop".

That is if you are trying to not allow these IP's in the GROUP access to or from...

cheers....
Reply With Quote
  #3 (permalink)  
Old 02-20-2004, 12:43 PM
Senior Member
  
Join Date: Apr 2002
Location: Germany
Posts: 196
Default Re: can not block traffic
hi,

i also set the rule to reject... nothing...

[img]/images/graemlins/confused.gif[/img]

Reply With Quote
  #4 (permalink)  
Old 02-20-2004, 04:39 PM
Member
  
Join Date: Feb 2004
Location: Maryland, USA
Posts: 31
Default Re: can not block traffic
Hi Toto,

You need to move it up in the packet filter order. Move it to the top above the internal_network, any, any, allow rule. That should work.
Reply With Quote
  #5 (permalink)  
Old 02-20-2004, 04:59 PM
Senior Member
  
Join Date: Apr 2002
Location: Germany
Posts: 196
Default Re: can not block traffic
[ QUOTE ]
Hi Toto,

You need to move it up in the packet filter order. Move it to the top above the internal_network, any, any, allow rule. That should work.

[/ QUOTE ]

hmm ? fist all deny rules and then all allow rules ?
is that my problem, because i have first all allow and then all deny...

Reply With Quote
  #6 (permalink)  
Old 02-21-2004, 01:53 AM
Member
  
Join Date: Jan 2004
Location: St.Louis, MO USA
Posts: 92
Default Re: can not block traffic
Yes the order of the rules is very important ASL looks at the first rule and moves downwards... So for example if you have that rule set as rule # 4 and another rule above that say rule # 3 tells ASL to do something similar then it will process them in order therefore nullifying rule # 4


Your may want to post your packet filter rules for some helpful tips...

Cheers....
Reply With Quote
  #7 (permalink)  
Old 02-21-2004, 02:28 PM
Senior Member
  
Join Date: Apr 2002
Location: Germany
Posts: 196
Default Re: can not block traffic
thanx for your help... i played around with the rules and now i found it..

regards


Reply With Quote
Reply

« Previous Thread | Next Thread »
Thread Tools
Display Modes
Linear Mode Linear Mode

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts
BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On


All times are GMT. The time now is 01:04 PM.

 
Contact Us - Astaro User Bulletin Board - Archive - Top

Powered by vBulletin® Version 3.8.4
Copyright ©2000 - 2010, Jelsoft Enterprises Ltd.


These pages are specifically maintained for the discussion of firewall issues within the Open Source community, and might already reflect new alpha/beta releases under development. Please refer to our product specifications for the functionality of the actual release. Discussions of new/enhanced functionality does not constitute a commitment of Astaro, to integrate this functionality into future releases. issues within the Open Source community, and might already reflect new alpha/beta releases under development. Please refer to our product specifications for the functionality of the actual release. Discussions of new/enhanced functionality does not constitute a commitment of Astaro, to integrate this functionality into future releases.