I am trying to use an ip packet filter in RRAS to disable port 80 traffic to specific workstations. I have applied and re-applied SP2. My filter is an outgoing filter on the internal interface and is configured as follows:
Allow all traffic except what is listed
Source IP = 10.10.100.111
Source Mask = 255.255.255.255
All else is set to ANY.
When I set the Source IP and Mask to ANY, all traffic is blocked (as it should be). When I put in the specfic IP and Mask for the workstation I want to block, all traffic from any ip address(including the “blocked” ip address) gets through. This leads me to believe that I either misunderstand the Source Mask setting or that RRAS is malfunctioning.
Any thoughts on why this doesn’t work?
