mlvp30
February 10, 2014, 5:02pm
1
Hi:
I am ashamed to ask this silly 101 question, but I want to block a external IP address (a.b.c.d) from accesing my network.
I have this rule: chain=input action=drop src-address=a.b.c.d as I have read in many threads in this board.
However this does not block the user (it has been doing a port scan now for almost one day).
What am I missing?
REgards
Can you post the rest of your settings? Just to clarify, the port scan is against the router?
efaden
February 14, 2014, 12:33am
3
Post your export.
Sent from my SCH-I545 using Tapatalk
If you want to block the access to the network behind the router change chain=input to chain=forward. You also need to make sure that this rule is above the other rules that would let it pass.
mlvp30
April 7, 2014, 4:06pm
5
Thanks for the answers.
What i did was to forward the ip to a empty IP. This did work.
REgards