Dear all,

I know this has been answered to death but I can't find an answer that seems to work with the 2710n router. My story 'should' be simple...

I'm trying to block skype to a range of IP addresses whilst allowing to another block of IP addresses.

I have created IP objects for the blocked and allowed machines and IP grouped them into BLOCK and ALLOW. I then created a CSM group to block Skype called "SKYPE'. I then created the rule in FIREWALL -> FILTER SETUP under DEFAULT DATA FILTER. The rule is:

1. Data direction LAN -> WAN; Source IP is BLOCK group; Application Filter is set to PASS IMMEDIATELY; App Enforcement is set to "SKYPE"

I'll be damned if I can get this to work though!


Questions:

1. Is creating the firewall rules under DEFAULT DATA FILTER the correct place for new rules or should they be put under a new filter set ( 3, 4, 5 etc)?
2. Where am I going wrong?

All help greatfully received

*bump*

Anyone?

pcsupport wrote: ...1. Is creating the firewall rules under DEFAULT DATA FILTER the correct place for new rules or should they be put under a new filter set ( 3, 4, 5 etc)?...

That is certainly where I would add them, yes.
I notice on the 2950 / 2955 units that under IM Object the profile indexes include a Skype option. Perhaps this may make setting up your filters easier? Regards, Neal