Block access to one server and port from "Site A" to "Site B"

[dubba]

I have a site to site VPN working very fine. I would like to block access to a server on "Site B" to all users on "Site A" on port 8080. What rule should I add?

I have LAN/WAN/WAN2 (multi WAN) setup with VPN on WAN.

Thanks,
DK

[GruensFroeschli]

You cannot firewall the OpenVPN interface.

But if you're using pfSense on both sides of the VPN tunnel you can define on the client side firewall-rules to disallow traffic with a destionation of the other side of the tunnel.

[dubba]

Thanks for the reply. But, the other site does not use PFSense yet and even then I will not be able to block ports on one particular server I guess, it has to be to the entire network.

Thanks again,
DK.

[GruensFroeschli]

How would you connect to the pfSense?
Does each client install OpenVPN or do you have another firewall solution?