Page 1 of 1

blocking activity

Posted: Fri Mar 21, 2008 2:15 pm
by bledar
Hello!

I want to block all activity, i mean download+upload for a specific IP.
May I use this configuration for blocking for example ip 192.168.12.17 ?
chain=forward src-address=192.168.12.17 dst-address=0.0.0.0 action=drop

I tried this, but it was blocking nothing.
I tried even queue roules but the same. Maybe because I am using equal bandwidth sharing on my MKT ?
Please help me with firewall roules becouse they I trust.

Thank You for all answers that you will give to me.

Re: blocking activity

Posted: Fri Mar 21, 2008 11:17 pm
by Chupaka
delete 'dst-address=0.0.0.0' or change to 'dst-address=0.0.0.0/0'

Re: blocking activity

Posted: Fri Mar 28, 2008 1:32 pm
by bledar
Hello.
Even in that mode do not work.
I tried this one, and it works as I want.
chain=input src-address=192.168.12.17 dst-address=0.0.0.0/0 action=drop

Is this the regular mode or something strange is going on???

Thnx.

Re: blocking activity

Posted: Fri Mar 28, 2008 2:33 pm
by gacopl
0.0.0.0/0 is the only proper way of ip description of 'Internet', basicly it means all ip addresses, but as friend earlier said you could also just don't put dst-address option and it would work the same way as well

cheers
Michal