Im usually ok with this sort of stuff, ive had many Drayteks, configured Untangle firewall etc, but im stumped here.
I have a number of IP cameras and I dont want them on the internet except for port 123 (Network time protocol) so they can keep time. (the amount of sessions these things open up is ridiculous).
Ive managed to use FIREWALL/FILTER SETUP/IP filter to block everything for the IP range of my cams and I can see the firewall counter going up and also see the blocks in syslog.
What I cant do is get a rule correct for allowing just port 123 for same IP range out to get NTP time back.
Any ideas?

:oops: udp not tcp - noob mistake!
All working now.