Firewall App: Forward filter

[LunatiX]

Used version: RM22.07, 1.16

I do some tests with the firewall app and forward filters. I'd like to "reject" the http and https service of a XM control. When i configure the two expressions in one rule, then I still have access to the webserver, see the picture:

But when I configure a own rule for every expression, then it works:

What do you think about it?

[CodeShepherd]

We will check this.

[StefanH · Accepted solution]

Hello,

"Note that the firewall application is implemented by means of nftables. Expressions within a rule are evaluated one by one. If the first expression matches, then the next expression is evaluated and so on. If all expressions of a rule match, the action you provided (reject) is executed. In your case, all expressions cannot match as the port cannot be 80 and 443 at the same time so one of the expressions will fail which is why the action (reject) is not executed."