Blocking Access to Specific Host

[bairdmj]

I am trying to create a simple rule.  The rule will deny all LAN users access to one specific internet host (TCP/*).  To do this I have created a firewall rule on the LAN interface:

Proto  Source  Port  Destination  Port  Gateway  Schedule  Description 
TCP * * BLOCKED.IP.HERE * *   BLOCK OUTGOING TEST

The rule has been moved to the very top.  Beneath this rule, I do have one that allows LAN NET to access *, but since this rule is on top, it should work right?

This rule does not seem to be working.. all LAN users are able to access the blocked destination.  Does anyone have any ideas as to why this is not working?  Am I missing a step?

Thanks

[Guest]

@bairdmj:

I am trying to create a simple rule.  The rule will deny all LAN users access to one specific internet host (TCP/*).  To do this I have created a firewall rule on the LAN interface:

Proto  Source  Port  Destination  Port  Gateway  Schedule  Description 
TCP * * BLOCKED.IP.HERE * *   BLOCK OUTGOING TEST

The rule has been moved to the very top.  Beneath this rule, I do have one that allows LAN NET to access *, but since this rule is on top, it should work right?

This rule does not seem to be working.. all LAN users are able to access the blocked destination.  Does anyone have any ideas as to why this is not working?  Am I missing a step?

Thanks

Have you verified that destination traffic are the expected iow the ip you have in the block?.
Check your logs(obviusly turn it on if you dont)

Otherwise you can try and block a site you know have only one ipadress and se if that works.

/f