New interface and how to block traffic from lan

Edgar, it sounds like you may be using the "Any" Network object instead of the "Internet" object in your firewall rules.  You shouldn't need to explicitly block traffic between the two subnets as it will be default dropped if not explicitly allowed.

Also, pinging is regulated on the 'ICMP' tab of 'Firewall' and is not included in the "Any" service object.  I thought that the devs changed the selections 'Gateway forwards pings/traceroute' to not include ping/traceroute between all UTM interfaces, just those that go out an interface with a default gateway.

Cheers - Bob

Hi,

Even using Internet object there is still traffic between LAN interface and the new interface. Only one masquerade rule defined new_interface->WAN

What is wrong?

Regards

Please insert pictures of the relevant configurations open in Edit mode.

Cheers - Bob

Hi,

this is the rule

Any idea?

Regards

Use "Internal (Network)" as the source instead of the "Internal (Address)" object.

Cheers - Bob

I changed to network and  Reject but same result

I changed to network and  Reject but same result

Web filtering being used?