For our first non-floating rule, we will implement a rule blocking developers' access to https://recode.net/. The process is relatively simple:
- We navigate to Firewall | Rules, and click on the DEVELOPERS tab. Then we can click on either Add button below the table to add a new rule.
- On the Edit page, we change the Action value to Reject. For Interface, we keep DEVELOPERS as the interface from which packets must come in on to match this rule. We can set the Address Family field to IPv4, IPv6, or IPv4+IPv6, depending on whether or not our network supports IPv4 addresses, IPv6 addresses, or both. We only need to block TCP traffic, so we leave Protocol set to TCP.
- The packets must come from the DEVELOPERS subnet for ...
