Discussion Locked

W2K Server - Packet Filters do not work

0 helpful
3 replies
Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

I am trying to use an ip packet filter in RRAS to disable port 80 traffic to specific workstations. I have applied and re-applied SP2. My filter is an outgoing filter on the internal interface and is configured as follows:

Allow all traffic except what is listed

Source IP = 10.10.100.111
Source Mask = 255.255.255.255

All else is set to ANY.

When I set the Source IP and Mask to ANY, all traffic is blocked (as it should be). When I put in the specfic IP and Mask for the workstation I want to block, all traffic from any ip address(including the "blocked" ip address) gets through. This leads me to believe that I either misunderstand the Source Mask setting or that RRAS is malfunctioning.

Any thoughts on why this doesn't work?

3 replies

by cportman

Change it to an incoming filter and it should work correctly.

The Source in your current situation is your server not the computer requesting the port 80 traffic.

With the incoming filter it will see the requesting pc as the source.

goodluck
cp

This discussion is closed to new replies.