Inter Vlan Traffic deny all except a few Addresses

abidkhanhk

Hello,
How can i create an intervlan rule where everything between the vlans is denied except 2 -3 specific hosts,

so the UserVLan tab is as following
Protocol Source Port Destination Port Gateway Queue Schedule Description Actions

    USERVLAN	*	192.168.2.42	*	*	none	 	Domain Controller Allowed

    USERVLAN	*	SERVERVLAN net	*	none 		               DENY ALL

    USERVLAN	*	*	*	*	none	 	Default allow UserVLAN to any rule

    USERVLAN	*	*	*	*	none	 	Default allow UserVLAN IPv6 to any rule

I think i am making a mistake in the order, can someone please give me the correct order, thanks.

abidkhanhk

Ok this is weird, after a while the rule started working...
i am very sure i reloaded filter many times manually...

johnpoz

i am very sure i reloaded filter many times manually...

Reloading filter doesn't kill states.. It just reloads the rules..

So states would of naturally ended or timed out.. When you have a new rule where states might already exist, you have to kill those states..

abidkhanhk

@johnpoz
Noted, Many thanks.