Firewall - Network Services Filter Problem

[Spicy93]

Hi All, Im looking to setup my network services filter to block WAN access to my IoT devices. See attached picture, I believe I set it up correctly, I found an older post saying to block port 443 to limit secure connections as well, so I did that.

Interestingly I still can access the IoT Devices from WAN, and when I monitor the router logs, I see those IP Addresses connecting using port 443.

Now attempting to block HTTPS disagrees with the statement at the top saying HTTPS can not be blocked. Any reason for this or way to get around it?

Just trying to make things more secure. Thanks!

 

[ColinTaylor]

Interestingly I still can access the IoT Devices from WAN, and when I monitor the router logs, I see those IP Addresses connecting using port 443.

The NSF is intended to block LAN to WAN access, not WAN to LAN. If you can access your IoT devices directly from the internet then you/they must have setup a port forwarding rule (either manually or through UPnP). Check System Log > Port Forwarding. Disable port forwarding on the device (or on the router if you did it yourself).