Hi all

I need some help tightening up our 3910 settings and would appreciate any assistance/advice that you can offer.

---

REQUIRED INCOMING PORTS:  xx and yy (ALL OTHER PORTS STEALTHED)
ALL INCOMING TRAFFIC to be blocked/dropped silently - unless it originates from the UK

ALL OUTGOING TRAFFIC to be blocked IF it is going to these countries:
·        Afghanistan
·        Aland Islands
·        Albania
·        etc.  (I need to be able to add and remove from this list as required)

ALL OUTGOING TRAFFIC to be ALLOWED IF it is going to these countries:
·        UK
·        Any other countries in the future that we want to add to this list

---

I have experimented but have run into some problems where even though a rule was meant to be for incoming traffic only, it also affected outgoing traffic so I've probably set something incorrectly.

If anybody has advice re: the above, or indeed further suggestions that I haven't considered that can either harden the above configuration or compliment it in some way then I'm all ears.

Many thanks