cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
604
Views
0
Helpful
2
Replies

RV130W Default Policy

shurley
Level 1
Level 1

Greetings

I have deployed a number of the RV130W and I have established access policies and port forwards.

For access, I allow WAN to LAN for a specific external IP to a specific internal IP. I then establish a single port forward for port 22 to that specific internal IP. What I see in logs from that specific internal IP, however, is as follows:

 Refused incoming connections:
       112.85.42.46 (112.85.42.46): 1 Time(s)
       114.35.73.163 (114.35.73.163): 1 Time(s)
       115.231.100.52 (115.231.100.52): 1 Time(s)
       119.180.20.10 (119.180.20.10): 1 Time(s)
       122.5.183.227 (122.5.183.227): 1 Time(s)
       123.31.31.84 (123.31.31.84): 8 Time(s)
       14.155.151.78 (14.155.151.78): 1 Time(s)
       181.25.242.156 (181.25.242.156): 1 Time(s)
       182.33.212.128 (182.33.212.128): 1 Time(s)
       186.47.153.62 (186.47.153.62): 1 Time(s)
       190.49.111.116 (190.49.111.116): 1 Time(s)
       191.82.88.223 (191.82.88.223): 2 Time(s)
       2.62.35.50 (2.62.35.50): 1 Time(s)
       37.79.165.244 (37.79.165.244): 1 Time(s)
       43.228.98.59 (43.228.98.59): 1 Time(s)
       60.177.1.70 (60.177.1.70): 1 Time(s)
       61.105.96.170 (61.105.96.170): 1 Time(s)
       78.111.26.163 (78.111.26.163): 1 Time(s)
       95.81.209.146 (95.81.209.146): 1 Time(s)

I would have thought the default input rule would have been to deny and the access rules would establish the exceptions. However, it appears the default input rule is to accept and I am unsure of the value of the access rules.

To address this, I have attempted an access rule to block all external access and then create the exceptions but I have failed. Would someone mind explaining how I can block access to the Internet while allowing access to whitelisted IPs?

Thanks.

2 Replies 2

S. Mazza
Level 1
Level 1

I'm not sure if this will help, but it may be best to list the exceptions first and the deny all blocking rule last.  This works in other situations and may help you.

Thanks for your input. I have tried that and the result is all traffic to the port is blocked. I have also tried setting the rule first and the same result.

I'm not sure why there isn't an option to select a default input policy as there is an output policy. It strikes me there is a greater risk inherent to external traffic coming in than internal traffic going out.