On 2830Vn. I have set up two filter rules so that only a single computer (IP) can connect to a computer on the network using RDP (port 3389). The two rules I have set up are as follows:

1. Block all incoming IPs from any port looking to connect to one IP on 3389. This should block all traffic.
2. Allow one IP on any port trying to connect to one IP on 3389. This should then allow just this one workstation through.

However, filter 1 is not applied - it simply does not block traffic. I have not yet activated filter 2 because I wanted to test the block rule first and then allow the single workstation through.

I can still make a connection to 3389 from any workstation, so the block rule is not working. Any help would be greatly appreciated?

Hi,

Check the following example : http://www.draytek.com/user/SupportFAQDetail.php?ID=2084

Hope this helps,

regards,

rj

Hi rj,

Thanks for the pointer but this was the very set of instructions that I had followed to set this up. It does not work. The filter rule is not applied and access is not restricted.

Matthew

Hi,

Please double-check step-by-step.

Im using this exact setup without problems

(confirm if you're creating this rule on Filter Set 2

regards,

rj

Hi,

I have checked and re-checked. I have it set up as follows:
Filter rule #2 in Filter set #2 after the default NetBIOS to DNS rule.
Direction: LAN to LAN
Source IP: Any
Destination IP: The relevant host IP, which is static.
Service: Relevant port
Fragments: Don't care
Filter: Block immediately.

The rule is checked as active.
I wonder if the problem lies elsewhere. Is this related to any other configuration such as the Default Rule in Firewall, General Setup? Perhaps it is those settings that are incorrect. I also have it set up as rule-based, not user-based. Is that important?
Regards,
Matthew

Your direction shows LAN to LAN. Are both your source and destination computers on your local network? If so, the firewall will not block connections even if it is the gateway for both devices as they can talk directly to each other on the local subnet.