[quote user="tomt"]
I have setup Connection Control as follows:
allow : 10.10.10.1 - 10.10.10.254
Yet I can still check POP3 email from an external address.
[/quote]
These addresses indicate that your network is behind a NAT router of some kind. Depending on how the NAT router is configured, it's possible that connections from the outside world are being remapped as they pass through it, so to machines on the inside of your network, they appear to be from a local machine. Take a look at the Mercury console when you do one of these outside connections (or check the logs) and see what the connecting address is reported as. If it's something in the 10.10.10.x addressing range, then your NAT router is doing address remapping and you won't be able to do this type of connection control.
Cheers!
-- David --
[quote user="tomt"]<p>I have setup Connection Control as follows:</p><p>allow : 10.10.10.1 - 10.10.10.254</p><p>Yet I can still check POP3 email from an external address.</p>[/quote]
These addresses indicate that your network is behind a NAT router of some kind. Depending on how the NAT router is configured, it's possible that connections from the outside world are being remapped as they pass through it, so to machines on the inside of your network, they appear to be from a local machine. Take a look at the Mercury console when you do one of these outside connections (or check the logs) and see what the connecting address is reported as. If it's something in the 10.10.10.x addressing range, then your NAT router is doing address remapping and you won't be able to do this type of connection control.
Cheers!
-- David --