Drop all but some in the forward chain

Hi,
I’m trying to set up some simple filter rules, but I’m stuck somehow:

I setup these rules:

chain=forward action=accept protocol=tcp dst-address=x.x.x.x dst-port=80
chain=forward action=drop

I want to drop any but the tcp packets for a specific address on port 80, but its not working I can’t reach x.x.x.x:80.

What am I missing?

cu
Flo

PS: If I dissable the second rule I can reach x.x.x.x:80.

Make sure your accept rules are before the drop rule.

Hi

Sure, I did. Well, I reset the FW and started all over again and now it’s working, but:

I opened a FTP server behind the FW (the server is connected to dedicated interface) in the same way. I can access it, but every file transfer cancels after roughly 1 second in which I can transfer about 15 MB.

Any idea what might be wrong?

See you
Flo

PS: I opened a new thread here concerning the unstable connection problem: