Tom > You don't need any rules. You just need policies: > > net wifiO ACCEPT > wifiO net ACCEPT > all wifiO REJECT > wifiO all REJECT
Got it. I didn't understand that policies have an *order*. Thanks for that. > You said that your guests need to do their own firewalling. And this > actually opens up very little since your firewall is doing NAT. > Not if you use the snat file from the two-interface sample. It > masquerades all of the RFC 1918 subnets. Wasn't me asking :-) But helpful anyway. DT ------------------------------------------------------------------------------ Announcing the Oxford Dictionaries API! The API offers world-renowned dictionary content that is easy and intuitive to access. Sign up for an account today to start using our lexical data to power your apps and projects. Get started today and enter our developer competition. http://sdm.link/oxford _______________________________________________ Shorewall-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/shorewall-users
