Hi

We have a rule Vigor 2950, we have setup a rule:

LAN to WAN
Source 192.168.1.1 > 192.168.1.254
Dest: Any
Ports: Source / Dest 80~80
Fragments Dont Care
Pass Immediately

We have a similar rule for DNS access for our server only. SMTP out etc

Then a block all rule for eveything at the bottom of the list:

Direction: LAN -> WAN
Source IP: Any
Destination IP: Any
Service Type: Any
Fragments: Dont Care
Block All

When i enable the block all rule i cannot access HTTP, but once disabled access is available.

I'm going a little nuts. Any ideas would be helpful.

Regards

Simon

Put the block rule first: use 'block if no further match'

Then put the allow rules using 'pass if no further match'