Hi,

I'm looking for some help on blocking some internal pc's from seeing eachother, can this be done using the firewall in the draytek?

I have a virtual host 192.168.1.125 with 5 machines on, i have another physical server on the network 192.168.1.200 I dont want 192.168.1.160 (a vm) being able to see that box at all.

Currently I have a rule in the data filter setup to block anything from 192.168.1.160 to 192.168.1.161 ~ 192.168.1.254 but it can still see it

I guess I should have done this using vlan's from the start, but rather than change everything I was wondering if it could be done another way.

Since the traffic is all on the same subnet, setting rules on the router will not work as the traffic will between the two machines will not go via the router.

Probably best to try and block access to the machine on the local firewall of 192.168 1.200, presuming the client machine has a fixed IP address.