Vigor 2600 plus series, annnex A (UK model)
Firmware 2.5.9_UK.

I've just inherited this site from a competitor who left it with numerous security flaws. One is that Remote Desktop to the server can be accessed globally.

Fixing this one has proved to be tougher than I had expected, though. Inbound filter rules seem to either have no effect at all, or only work intermittently.

Typically a rule such as
Block immediately
Source: any (/32) = 1 65535
Destination: (ServerIP) (/32) = 1024 65535

should block access to all high-order ports, should it not?

Information on inbound rules is hard to come-by, the only examples I can find are for outbound rules, so basically I'm assuming this is correct from experience of other routers.

One possible issue is that strictly speaking the subnet for an 'any' rule should be 0.0.0.0 -but I can't see any way to set this on the 2600, you can only set /8/16/, etc.

-any ideas why the filters don't work?