Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 6 replies
  • Subscribers 2 subscribers
  • Views 33165 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Blocking all traffic from IP address

IT admin
Hi All,

I'm running UTM 9.312-8.  Does anyone know of an easy way to drop or block all traffic from an external IP address?  I have added a firewall rule to drop all traffic from a number of IPs but the problem is that the auto firewall rules are processed before the manual rules, so this doesn't take effect for a number of DNATs.  I was thinking I could create a DNAT with an auto rule for all traffic from those IPS, for any service, put this in top position, and then direct to a dummy address?  If so can someone please suggest what I could/should be using for the Action?  Or any other ideas you may have to easily accomplish this would be great.  

Many thanks for your help!


This thread was automatically locked due to age.
Parents
  • 0
    I think I've seen this suggested in the forums before. Just create a black hole network definition with a dummy address and DNAT all services (any) coming from iPs you want to block. Pretty much what you mentioned.
Reply
  • 0
    I think I've seen this suggested in the forums before. Just create a black hole network definition with a dummy address and DNAT all services (any) coming from iPs you want to block. Pretty much what you mentioned.
Children
No Data
Unfiltered HTML