Drop all packets

[jdprovine]

I added an exception to a spyware profile to drop all packets and it now says its dropping and allowing the packets how can that be?

[gwesson]

The security rule is set to allow, which lets the security profile on that rule get processed. So the traffic is allowed insofar as to let the spyware profile make a decision. Note that only a single packet was recorded in the traffic log referenced.

Cheers,

Greg Wesson

[jdprovine]

Actually what I found was that there was another rule (below the first one) that it went too after this that had no security profile assigned and was allowed there. Once I applied the security profile to the rule that was allowing it through, the spyware conficker packets were dropped.

[pankaku]

Could you share the two security rules? Just a screenshot is enough

[jdprovine]

[pankaku]

Is the whole file reached to the destination? Firewall allows some byte to determine the kind of traffic is going through the firewall and there after starts drooping them.

[jdprovine]

How would I know if the whole file reached the destination? A deny allows nothing as far as I can tell

[pankaku]

How you are saying that firewall is allow is allowing traffic?

[prb]

Hi @jdprovine,

I might be overlooking something.

But from what I see, the rule in th original log screenshot is different from the 2 screenshots below.

And so are the zones between the screenshots.

Did you manage to find out the issue and resolve it?

Thank You.

[jdprovine]

I found out it was dropping the packets and  it is working