network rule to allow only http in port 80.

  1. How can i make a network rule that makes only ordinary internet browsing in port 80 posible, and nothing else. (to tjectk if it is http is maybe not nessesary, just tcp/ip).

  2. I dont understand that if i apply this rule:

“BLOCK and LOG TCP or UDP IN or OUT FROM IP [Any] TO IP [Any] WHERE SOURCE PORT IS 80 AND DESTINATION PORT IS 80”.

Then it is still posible to browse using Internet Explorere.

(I know that the rule in 2 is oposit of my question 1, but i still don´t understand why this rule is not working as I exspect).

Thx if someone can give advince, Anders, Denmark.

?

hi and welcome to the forums (:WAV)

  1. you must mofify the default rule #0 like this:
    Action = Allow
    Protocol = TCP/UDP
    Direction = out
    Source IP = Any or your computer IP
    Destination IP = Any
    Source port = Any
    Destination port = 80 (instead of any that is the default)

  2. Just add a block rule at position #0:
    Action = Block
    Protocol = TCP/UDP
    Direction = out
    Source IP = Any or your computer IP
    Destination IP = Any
    Source port = Any
    Destination port = 80

hope it helps,
PAnagiotis