I have responsive firewall running (13.0.36.1) and it is listing a Blocked Host that is making a connection attempt every 5 minutes. I’ve added the host ip address to the firewall Blacklist but the Blocked Host display is still showing a connection entry every 5 minutes. I suspect this may be that there is an existing Established connection through the firewall for this host address and that the Blacklist is only blocking New connections? Nothing necessarily wrong with this setup, I’m just wanting to understand if this is the correct behaviour.
Thanks,