I've successfully set up a L2TP VPN and a PPTP VPN for connections coming into my 2820 from remote users, but I'd really like to prevent those tunnels being accessed from anywhere other than 2 or 3 specified fixed IP locations (my other offices).

Ideally I'd like to block ALL externally initiated activity (port probes etc) that do not originate from my LAN or one of my 3 fixed IP locations.

To be clear, it's not that I want connection attempts to get a "Connection Refused" message, I'd like my router to appear invisible, ignoring potential unauthorised access attempts.

I've done it using another router make previously, but the Firewall > Filter Setup procedure on the draytek is confusing to me, I don't even seem to be able to populate the Filter Set Source IP box.

Am I going about this the wrong way?

Thanks,

Mark.