endian 2.5.2 ipsec deny traffic from one end

[Guest]

[WintersICT]

Hello all,

I am new to this forum but am using endian for a long time now.
Firstly endian works perfectly and never had any complaints with it.

But now i have a problem i cant seem to solve or don`t now how to do it.
I searched the forum and the only post wich had the same sort of question as myself is from february and wasnt answered.

I hope you guys can help me.

I have setup a vpn server in a datacenter. This server has endian as its main ipsec firewall. This server is going to be used to put a lot of other networks in the range of endian.

now i can set up ipsec connections perfectly and i can ping both networks so the tunnels are up.

But now i want to block the remote end from connecting to the network on endians end. So i thought the vpn firewall is the way to go.
But i cant seem to get one end denyed on the firewall.

i want for example

endians internal lan say 192.168.0.0/24 allowed to 10.10.1.0/24
but want to deny traffic to 10.10.1.0/24 to 192.168.0.0/24

How do i do this.
I tried eveything even deny every interface to every destination but i cant seem to get the vpn firewall deny anything.

Is the VPN Firewall working?

Thanks in advance

Yourse sincerely

Daniel Winters