Quantcast
Viewing all articles
Browse latest Browse all 20028

Firewall source Mac-address fails on commit

Hi All,

 

I am having trouble adding a rule to block a specific mac-address after 22:30. initially i had it working (albeit without the starttime/stoptime) when i had the fire wall set up for each interface using the GUI. Now I have set up the zones I have tried using the CLI to add a rule but it fails on commit. I commited each line separately to see what caused the issue and it fails when I try to commit the source mac-address 00:00:00:00:00:00

 

The ruleset below is applied to the zone WAN from LAN.

 

note: action accept is just for testing purposes

default-action accept
rule 1 {
      action accept
      state {
             established enable
              related enable
      }
}
rule 2 {
      action drop
      log enable
      state {
              invalid enable
      }
}
rule 10 {
       action accept
       description "Test Block Iphone"
       source {
               mac-address 11:11:11:11:11:11
       }
}

 

When I try to commit the source line of rule 10 i get the error below:

Error: [sudo /sbin/iptables-restore -n -v 2> /tmp/iptables.out] = 256
Iptables restore OK

Commit failed

I have tried rebooting and upgrading the firmware to V1.91

 

any ideas?

 

thanks


Viewing all articles
Browse latest Browse all 20028

Trending Articles