Print

Please login or register.
1 Hour 1 Day 1 Week 1 Month Forever
Login with username, password and session length

[riccio99]

Hi all, i have a DFL-800 with a lan to lan VPN with a branch office.

Now i want to block the traffic from the branch office to the main office so that they can ping or do nothing on our network but i want the us from the main office can do everything on their network(remote desktop connection,ping and so on...).

I tryed to put an ip rules in this way:
name BLOCK_boffice        
action Reject  
source interface moff-boff_tunnel    (ipsec tunnel)
source network boffLAN  (lan of b offcie)        
destination lan                          
interface destination lannet              
network services all_services

but it doesn't work they can still ping a see us on network share (\\192.168.....)

Please someone can help me ?

thx you!
  

[danilovav]

Just remove/disable rule
Allow moff-boff_tunnel/boffLAN lan/lannet

[scrubsguy]

did this work?

[riccio99]

i'm sorry i was out for work...

yes..it worked...or better it illuminated me... i delete all rules and added only one rule:

ALLOW_ALL Allow lan lannet any all-nets all_services

it permit all traffic from main office over vpn and block all traffic from branch office pver vpn.

it seems to work...

thx a lot for uur help.

[scrubsguy]

cool