![阻止除 1 USG-3P 防火墙之外的所有网站](https://linux22.com/image/793019/%E9%98%BB%E6%AD%A2%E9%99%A4%201%20USG-3P%20%E9%98%B2%E7%81%AB%E5%A2%99%E4%B9%8B%E5%A4%96%E7%9A%84%E6%89%80%E6%9C%89%E7%BD%91%E7%AB%99.png)
我正在尝试阻止我们网络上的计算机的所有网络(HTTP 和 HTTPS 流量) - 除 1 个网站外。我正在使用 USG-3P,并在防火墙规则中添加以下 2 条规则(按顺序):
Internet In, Before Predefined Rules, Accept, All IPv4 Protocol
Source Type Port/IP Group, IPv4 Address Group [WEBSITE IP ADDRESS], Port Group "Web" [80, 443]
Destination Type IP Address IPv4 Address [MACHINE LOCAL IP ADDRESS]
Internet In, Before Predefined Rules, Reject, All IPv4 Protocol
Source Type Port/IP Group, IPv4 Address Group Any, Port Group "Web" [80, 443]
Destination Type IP Address IPv4 Address [MACHINE LOCAL IP ADDRESS]
这似乎不起作用。有人有什么想法吗?只是试图完全阻止网络上除 1 个网站之外的单台计算机的所有网络流量。
谢谢。
答案1
Rule 1 (Allow access to
specific website):
Action: Accept
Source: IPv4 Address Group [WEBSITE IP ADDRESS], Port Group "Web" [80, 443]
Destination: IPv4 Address [MACHINE LOCAL IP ADDRESS]
Rule 2 (Block all other web traffic):
Action: Drop
Source: Any
Destination: IPv4 Address [MACHINE LOCAL IP ADDRESS], Port Group "Web" [80, 443]
确保接受优先于放弃
我认为你应该像上面那样做