I want that all clients can only sync with server. No other traffic should be allowed. I tried to close all traffic except synchronization service (Synology Drive).
accept dport 6690 and ipprotocol tcp and ipdest 10.244.210.3/32 ; accept sport 6690 and ipprotocol tcp and ipsrc 10.244.210.3/32 ; drop;
But i get
$ telnet 10.244.210.3 6690 Trying 10.244.210.3... telnet: Unable to connect to remote host: No route to host
So how to do it?
Offcourse it works wit default settings
$ telnet 10.244.210.3 6690 Trying 10.244.210.3... Connected to 10.244.210.3. Escape character is '^]'