Werner, on 09.07.2011 10:10, Werner van Staden wrote: > Erich, > > Not sure this is the scenario you are talking about: > > I set up my LEAF firewall as a client in a wireless network which > extends across my neighbourhood. Installed wireless.lrp and loaded the > following modules for the Atheros radio & client state:
Sounds like the thing I have in mind > > ath_hal > wlan > wlan_scan_ap > wlan_scan_sta > ath_rate_sample > ath_pci > wlan_acl > wlan_ccmp > wlan_tkip > wlan_xauth What packages did you install? > > The LEAF box is therefore both a wifi client and a firewall to my > private LAN. However, because the community wireless network has a Class > C address space (192.168.2.0/24) there are issues when my private > network hosts (192.168.0.0/24) try to make encrypted connections to > remote hosts. This is no-doubt a private address routing issue... If you are talking IPSEC it is a nat traversal issue > > Overall, internet browsing, mail and day-to-day connectivity is stable > and perfectly usable. Fine, would you mind to share your settings? How about usability? I am looking to use this as a gateway which changes uplink WLAN providers often (on my boat :-) I have been able to look at the Buffalo product, it has quite a nice user interface with a few things lacking. As it is built on top of DD-WRT we should be able to provide something similar but more flexible. Thanks Erich
smime.p7s
Description: S/MIME Cryptographic Signature
------------------------------------------------------------------------------ All of the data generated in your IT infrastructure is seriously valuable. Why? It contains a definitive record of application performance, security threats, fraudulent activity, and more. Splunk takes this data and makes sense of it. IT sense. And common sense. http://p.sf.net/sfu/splunk-d2d-c2
------------------------------------------------------------------------ leaf-user mailing list: leaf-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/leaf-user Support Request -- http://leaf-project.org/
