Firewall/NAT

Is this possible. I want to set up a rule that where xx.xxx.xxx.x IP address is denied any connection or response .
I have tried a few things and seemed to have failed at all attempts.

Thanks for ant tips
Allan

I tried this way
rule Block
IP xx.1.1.1/1 dam if it didn't block my buddies IP witch has 3 digits XXX.xx.xxx.xx and 2 others I have that connect to a game server and my WHS box.
Any tid bit tip on say blocking the whole range of 85.x.x.x  with out blocking all the other IP"s
when I put the complete address in  /31 the WHS server's remote alert add in would still show this bot box connected.
totally confused here.

Is this possible. I want to set up a rule that where xx.xxx.xxx.x IP address is denied any connection or response .
I have tried a few things and seemed to have failed at all attempts.

Thanks for ant tips
Allan

You want to blacklist some IP(s) from accessing m0n0wall or internal IPs trying to get out to the Internet through m0n0wall?

I want to keep external ip's from getting in to anything I have 2 Zoneminder systems 1 game server and a WHS server plus 6 user pc's .
Although the log shows tons of blocked entries. I'm getting hits from the APP remote alert on my WHS server , These are scanning bot boxs I'm sure , Those are the IP's I would like to block at the wan port the most.
Allan

I want to keep external ip's from getting in to anything I have 2 Zoneminder systems 1 game server and a WHS server plus 6 user pc's .
Although the log shows tons of blocked entries. I'm getting hits from the APP remote alert on my WHS server , These are scanning bot boxs I'm sure , Those are the IP's I would like to block at the wan port the most.
Allan

This should help. This is a sample of my firewall rules that block spam servers from sending to my e-mail servers. Just substitute in *any* port instead of port 25 and that should block everything to either a single machine on your LAN or all of them if you just leave it as "LAN net" for example. Be sure the firewall rules are at the very top because m0n0wall goes based on the first match on how it processes the rules.

Use the CIRD calculator here to get the exact range that you want to block: http://www.subnet-calculator.com/cidr.php

Thanks
it has helped although no matter what I seem to do the IP's I'm trying to block still show up in remote alert as usual they come and go