Region : Malaysia

Model : TL-ER6120

Hardware Version : V1

Firmware Version : 1.0.5 Build 20130314 Rel.56468

ISP : TM

Hi,

I encountered weird result when configuring the TL-ER6120's access rules.
I'm trying to block all the services from DMZ to LAN, with HTTP and ICMP as exceptions.

Src:192.168.3.0/24, Des:192.168.2.0/24, Policy:Allow, Service:HTTP, Interface:DMZ, Time:Always
Src:192.168.3.0/24, Des:192.168.2.0/24, Policy:Allow, Service:ICMP, Interface:DMZ, Time:Always
Src:192.168.3.0/24, Des:192.168.2.0/24, Policy:Block, Service:ALL, Interface:DMZ, Time:Always

After configure the access rules as above, I was able to ping from DMZ to LAN, but HTTP just NOT working.

Guys, any idea?

Regards,
Kyle