block the internet

[dynamicshyam2006]

how can block the particular user internet in untangle ?????

[WebFooL]

hi,

You can block UDP and TCP with the firewall. (Other protocoles like ICMP you need packetfilter)
And with Ad connector you can create a "block internet" rack and place all users that you want to block there.

If you have static ip you can just create a block rule in the firewall that say block from staticip1,staticip2 to any (or external).

[dynamicshyam2006]

hello

i want to block particular host (192.168.1.185).
my static public ip is 125.74.52.3

i create a rule but does not working .


how can i do???????????????

[WebFooL]

The Rule should look like this:

Enable Rule: Checkt
Description:Block rule for 192.168.1.185
Action: Block
Log: Up to you

Rule

Traffic Type: ANY
Source Interface: ANY
Destination Interface: ANY (or External)
Source Address: 192.168.1.185 (if this is your client)
Destination Address: 125.74.52.3 (if this is the destination)
Source Port: ANY
Destination Port: ANY

Place this rule on top. (in the firewall list)

Edit:
Now i see that this post is in the "OpenVPN" section.
Are this client connection over VPN?
Untangle OpenVPN is not route thru it is a Splitt tunnel.

[dynamicshyam2006]

hello

i have add same rule in firewall module .but my particular host is browsing all the things.

[crazyram]

Originally Posted by WebFooL

The Rule should look like this:

Enable Rule: Checkt
Description:Block rule for 192.168.1.185
Action: Block
Log: Up to you

Rule

Traffic Type: ANY
Source Interface: ANY
Destination Interface: ANY (or External)
Source Address: 192.168.1.185 (if this is your client)
Destination Address: 125.74.52.3 (if this is the destination)
Source Port: ANY
Destination Port: ANY

Place this rule on top. (in the firewall list)

Edit:
Now i see that this post is in the "OpenVPN" section.
Are this client connection over VPN?
Untangle OpenVPN is not route thru it is a Splitt tunnel.

This rule will block any traffic from 192.168.1.185 to 125.74.52.3 but will do nothing with the internet traffic.
If you UT ext side is connected to the Internet gateway and no host to be accessed by your internal side on the external, try repalcing the Ip by ANY at destination address.
Keep in mind ANY really means any so source IP will not have any access to any destination on the EXT side of the Untangle, including mail servers or any other service.

Kind regards