ACL, Simple firewall rules

[m00n]

Hi
I want block any incoming traffic from outside to one specific host, but allow him internet access so i need established connection. IN documentation i found example

Code: Select all

policy condition c1 destination ip 1.1.1.1 established
policy condition c2 destination ip 1.1.1.1

policy action drop disposition drop
policy action allow

policy rule r1 condition c1 action allow
policy rule r2 condition c2 action drop

qos apply

It doesn't work, Block incoming traffic to host, but i dont have connection to outside world. Any sugestion ?

[one6f]

Hi m00n,
try to use Logging Rules such as here, then you will see every packet which is blocked or allowed. If you are using console simple add log to the end of each policy rule.

[m00n]

Problem is solved.
I don't think about getting acces to my internal network (default gateawy, dns servers etc.)

so

Code: Select all

policy condition c3 destination ip 1.1.1.1 source ip 1.1.1.0 mask 255.255.255.0
policy rule r3 condition c3 action allow

solved the problem