Block external IP

Hi Bastiaan van Leeuwen,

Thanks for reaching out to the Community! 

Try to locate the automatic firewall rule created for this DNAT rule, and from the Advanced tab, remove "Log traffic" if it's selected. Or you can create a custom matching firewall rule and select action drop and remove "Log traffic". 

Reference screenshot: 

Thanks,

Hoi Bastiaan,

Please show a picture of the Edit of the "WAN Interface..." object.

Cheers - Bob

Thanks for the reply. That does not log the traffic anymore, but i want to block it. In the log it says logged or blocked. Is the logged traffic blocked? I want it completly blocked do not mind if i see it as blocked in the log.

Hi Bob,

See below:

I think i'm making an error here. I redirecting the traffic to a dead host (bogus IP). So it will go through my firewall and will be logged until i deselect the log traffic option like you say..

You have done it correctly, Bastiaan.  I just wanted to confirm that the items in the Network group were bound to the WAN interface.  The "(Address)" objects are bound to the interface, so the resulting rule is applied to the INPUT chain as it needs to be.  In this case, you "blackhole" the traffic instead of blocking it.  You might be interested in #2 in Rulz (last updated 2021-02-16).

Cheers - Bob