firewall block not working for camtasia 9

If they penetrate your network they won't be able to phone home to the command and control servers. This will combat against BotNets and many malware. I prefer adding explicit block all rules, just so it's clear what's the intent it.Ĭhamele0n wrote:What you should be doing is creating explicit allows for each port that you need (like your HTTP and SSH rules), and then delete the 'allow all' rules when you have everything you need for your network. He needs to eliminate the 'allow all' rules, or add a 'block all' rule. It's not setup correctly what he wants is to block all outbound traffic, so using destination 'WAN net' won't work. Although for security best practices you have the right idea.

This is making your explicit allows for HTTP, and SSH pointless. The problem I see is that you have a few allows for HTTP, SSH, and such. My WANnet interface has an IP assigned by DHCP, and is on the same subnet as the LANnet interface, could this be the problem?Ĭhamele0n wrote:Honestly though, for what you want, it looks like it should be setup correctly.

I'm a bit confused with how to get this working, I can setup firewall rules on the gateway router, but it isn't anywhere near as straightforward as it is in pfsense. The pfsense vm is on our local lan, there is a basic VDSL Firewall/Router as the perimeter gateway to public internet, the server I can connect to is on the public internet.

Alternatively you could delete the default allow rules but by adding an explicit deny it's obvious what is causing the block (in case someone reviewing it doesn't understand that unmatched packets are blocked by default.) I would also enable logging on all block rules, so that log entries are generated when packets are blocked (also aids troubleshooting) What you probably want is a rule just before 'default allow LAN to any' that blocks all traffic that way anything not matched above is blocked. Is the IP of the external server within the subnet of the WAN interface, or is it just a server somewhere else on the Internet? That rule will only block if its in the WANs subnet.

Firewall block not working for camtasia 9