I am trying to disallow some ping requests using firewall. So... i have a computer, connected to the one network using cable (local net 192.168.1.*) and to the second using wifi (for internet connections only 192.168.2.*). I want to allow everything within the first network and disallow everything possible within the second. So i have such rules about ICMP: 1) Local allow: Allow (in/out) all addresses, all ports, etc (the default rule) 2) Second allow: Allow (in/out) in trusted zone(which contains network one only) 3) Disallow: Disallow (in/out) everything in the second network So these rules (as the precedance says) should block "ping 192.168.2.10", but i receive replies. Why is this so?