So... I would -

add chain=forward protocol=tcp dst-address=192.168.0.141 drop comment="Block this IP"

?

If you could see my expressions as I try to interpret all those properties... priceless. My brain is going to asplode now....

Help?!

Okay. I think that I've figured out where I used to do this on the Linksys SOHO router. It disallowed IPs in its NAT section. I think when I loaded the IP addresses there, I was saying "do NOT translate these IPs to our external IP address" and therefore the PCs were blocked. But what you'...

Ah.. I've been there. I honestly have tried to use the manual. I can't understand it. And I'm working to correct that by studying. In the mean time however, this router has been set up and I need to modify it to block internal (static) IPs from going outbound/inbound w/packets. What is that called? ...

And a <bump> to the top, for hope.

t.i.a.

I'm afraid I have this wonderful router... and I don't know how to use it yet. I could use some assistance in configuring our Campus for summer school. My old, puny router (linksys SOHO router) had a table that I could type in ip addresses from my static lan. Then those PCs could access our servers,...