I created a VPC using the VPC wizard with two subnets (public and private), and a NAT in front of the private subnet.
Looking at the ACL for the the subnets, there was a rule to allow all INBOUND traffic for
0.0.0.0/0. I'd like to disallow any inbound traffic that's not coming from the NAT (with IP 10.0.0.8) so I change the ACL to be similar to the ones in
Scenario 2 in http://docs.aws.amazon.com/AmazonVPC/latest/UserGuide/VPC_Appendix_NACLs.html.
ALLOW ALL PROTOCOLS on ALL PORTS from
10.0.0.0/16, with a disallow for
This doesn't seem to work correctly as my instance don't have internet access. Is there something else I need to setup/change to get it working?