How to block one client from accessing another

[PimB]

I'd like to block TCP/UDP access from one client (192.168.2.10) tot a other client (192.168.2.30) wich has a webserver.

A simple block firewall rule from - to doesn't seem to work.

How can I achieve this?

[mimugmail]

Only with a Firewall on the second client.

[bartjsmit]

You need to separate them at layer 2 or layer 3 to force them to go through the firewall. That means (respectively) putting them on different VLAN's or on different IP subnets, or preferably both.

Different subnets is easiest, since the firewall is a router out of the box. You will need to move the web server to a different firewall network interface with a separate switch. If you don't want to have multiple firewall interfaces and multiple switches, VLAN separation is the answer.

Bart...

[PimB]

That's clear. Thanks to you both!