-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 On 03/11/2017 03:22 PM, Ryan Joiner wrote:
> On 3/11/17 12:38 PM, Tom Eastep wrote: Tom, Hey just curious, how > come you say to do: > > net wifi ACCEPT I said net wifiO ACCEPT > > at the top of that policy file? Does that open up more that > desired? You said that your guests need to do their own firewalling. And this actually opens up very little since your firewall is doing NAT. > > Also doesn't there need to be a MASQUERADE line in snat file? > MASQUERADE 10.128.128.0/24 eth0 (or whatever interface for > net is) > Not if you use the snat file from the two-interface sample. It masquerades all of the RFC 1918 subnets. - -Tom - -- Tom Eastep \ Q: What do you get when you cross a mobster with Shoreline, \ an international standard? Washington, USA \ A: Someone who makes you an offer you can't http://shorewall.net \________________________________________________ -----BEGIN PGP SIGNATURE----- Version: GnuPG v2 Comment: GPGTools - http://gpgtools.org iQIcBAEBCAAGBQJYxJGWAAoJEJbms/JCOk0QgCwP/1pJOjeSew4bBSUUlsKVw+tr m3lzYzmfJkwM3XNCdkDuxsNqtx271Jb4xe1Y9j5K1iWrv2XiEnn3MeJ2RbBamSq6 Z/nvpe2KkECVbAiOMHYL984iCsoTb9hSAyJs7KoV903REBNzsf5nThy3fuZmYEmz bpPUREfGBLS68cHsrQlnmD3Df1myF+FaEgYoatv1ez+gHAbn6TptLGr2ALPM1m5A T+MtAh8/FxKk7ZahIepAn2iXB0LiOePVFF2rtbKNBKKxWreZAVXl17FJduSGsCCc 4sk/pUmiAtqdAoJeBHSFJzkJu296Y5oi1932CwxLGRsuAfobAbtbqS7y25Ykp3NH whTmodIzCOKEZPUvhpsQ8wvwxbbJhNfGnVzHEq7zZYW7MdO7qrZ6bcfdy7F3EFnA Cf+ZiUube0+WJ1b1kCRIuSW3A5ln7kX+wbHjj21kvkV0JZ1UofOF21jZfcj8i4Ol 9L1nvTmSzpcxva1XCh37WG3IxzW5pGtJpTG19L+Giwm/ah4hZWr4ocKH/G2Jcl4I Bhu7sNpnBvgLWObF/+RhyyHGM3mHGTjERF2xjt+cn69/9Fw5VwZzvP9a7qRauhrG tHriuSxoPVSjeona1h55vHLSIc56aGmCYaNafZyxDwXYRlGLDwBvDUl7wMeU+g3Y 38OycyHa8NfuHCrYtfGe =lF5Q -----END PGP SIGNATURE----- ------------------------------------------------------------------------------ Announcing the Oxford Dictionaries API! The API offers world-renowned dictionary content that is easy and intuitive to access. Sign up for an account today to start using our lexical data to power your apps and projects. Get started today and enter our developer competition. http://sdm.link/oxford _______________________________________________ Shorewall-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/shorewall-users
