restrict the Access for multiple Networks over SG105

Question

Hi, Just a &ldquo;simple&rdquo; Question, but I only use my Sophos SG 105 at Home, and so I&rsquo;m no Specialist. I&rsquo;ve two Networks (192.168.131.0 and 192.168.179.0) on two different Network-Cards (eth1 and eth2). The Access to the WAN on eth0 works for both Networks -> wished. But they shouldn&rsquo;t see each other. I&rsquo;ve tried to solve it by using a Firewall-Rule, but this helped. Any Suggestion what I&rsquo;ve to do? Best Regards

Scott_Klassen · Accepted Answer

When using various facilities, the UTM creates "system" firewall rules to allow them to function. These have precedence over manually created firewall rules. Examples are for ICMP at Network Protection > Firewall > ICMP or anywhere there is an allowed networks boxy, such as the Web Filtering proxy. For ICMP/ping, you wouldn't need to stop using the checkboxes on the ICMP Tab and create only manual rules to allow the traffic. For Web, you would need to create your blocks in the Web Filtering Filter Actions in use.

__________________
ACE v8/SCA v9.3

...still have a v5 install disk in a box somewhere.

http://xkcd.com
http://www.tedgoff.com/mb
http://www.projectcartoon.com/cartoon/1

Andreas Czech · Answer

Hi all, 
 
thanks for your Notes. I've found the Cause. 
It was because of an Firewall-Rule which allowed ping to any Destination. Changed it -> worked