Хм. А покажите скрин как это сделать? А то у меня можно максиум по подсети фильтровать. В DSM5 сделали фильтр по стране?
PS У меня какие-т проблемы с русским языком - ещё руки не дошли разобраться - так что скрины и выдержка из сино-хелпа на английском
http://s017.radikal.ru/i419/1409/7a/53a400a15533t.jpghttp://s004.radikal.ru/i207/1409/10/8eea4e4a01b3t.jpg
Firewall
Creating firewall rules at Control Panel > Security > Firewall helps prevent unauthorized login and control service access. You can decide whether to allow or deny access to certain network ports by specific IP addresses.
To create a firewall rule:
1.Select a network interface from the drop-down menu in the upper right corner.
2.Click Create.
3.In the Ports section, select one of the following:
◾Choose All to apply the rules to all ports.
◾Choose Select from a list of built-in applications.
◾Choose Custom and click Custom, and then enter up to 15 ports separated by commas, or specify a port range.
4.In the Source IP section, select one of the following:
◾Choose All to allow or deny all IP addresses.
◾Choose Specific IP, and click Select, to allow or deny specific IP addresses or IP range.
◾Choose Region, and click Select, and then specify up to 15 countries to allow or deny IP addresses of that region.1
5.In the Action section, select one of the following:
◾Choose Allow to allow access by ports and source IP addresses you have specified.
◾Choose Deny to deny access by ports and source IP addresses you have specified.
You can also choose to Allow access or Deny access at the bottom of the rule list to allow or deny the access that matches no rules.
Note:
◾You can create up to 100 rules for a network interface.
◾Drag-and-drop to reorder the rules in the list.
◾Rules are prioritized according to their positions in the list.
◾If you have multiple network ports connecting to the same subnet, the firewall rules may not work properly.2
◾When you combine multiple LAN ports with link aggregation, firewall rules from the first network interface will be applied.
◾If your Synology NAS device connects to the Internet via PPPoE, the related firewall rules must be configured on the corresponding PPPoE interface.
____
1.This function includes GeoLite data created by MaxMind, available from http://www.maxmind.com.
2.Applies to specific models only.