Firewall Rule for XT9 - Inbound Traffic

[03397]

Hi there. I owe an XT9 whole mesh and I was wondering If there is a way to block inbound traffic using CIDR? Is there another way to block whole range of IPs and and not one by one hosts?

 

[ColinTaylor]

Can you provide more context? The router blocks all unsolicited inbound connections by default.

 

[03397]

I have a port forwarding service to port 8123.
I want to block the access to this port from a whole bunch of IPs. If you have firewall enabled is deny list. So if you do not have anything there everything is allowed. So, everybody can access my service 8123 port. If I add a certain host then this IP cannot access this from the outside.

 

[ColinTaylor]

I have a port forwarding service to port 8123.
I want to block the access to this port from a whole bunch of IPs. If you have firewall enabled is deny list. So if you do not have anything there everything is allowed. So, everybody can access my service 8123 port. If I add a certain host then this IP cannot access this from the outside.

Which router page are you looking at? Is it the Network Services Filter? That is for blocking outgoing connections, not incoming connections.

 

[03397]

No my friend I am seeing the general firewall page. This is for inbound traffic.

 

[ColinTaylor]

As far as I know there's no way to enter a range of addresses. It can only be a single address.

The correct place to restrict the addresses would be in the individual port forwarding rule (WAN - Virtual Server / Port Forwarding). However, that suffers from the same problem of only allowing a single source address.