Tom
On Mon, Mar 13, 2017, at 08:43 AM, Tom Eastep wrote:
> > What I would do is simply add wlan1 to the loc zone.
That's slick. I didn't think I could do that because it's on a different LAN
segment. Re-reading the docs, I clearly got that mixed up!
> Make that the 'lan' zone.
Yep I figured :-)
Ok let's take a look.
Atm, I have
interfaces
net EXTIF
optional,physical=$IETH0,dhcp,tcpflags,nosmurfs,logmartians=1,routefilter=1,sourceroute=0
wifi0 WIFI0IF
optional,physical=$IWLAN0,dhcp,tcpflags,nosmurfs,logmartians=1,routefilter=1,sourceroute=0
wifi1 WIFI1IF
optional,physical=$IWLAN1,dhcp,tcpflags,nosmurfs,logmartians=1,routefilter=1,sourceroute=0
- INTIF
physical=$IETH1,dhcp,tcpflags,logmartians=1,routefilter=0
To "simply add wlan1 to the loc zone", would just changing the 'wifi1' line to
- wifi1 WIFI1IF
optional,physical=$IWLAN1,dhcp,tcpflags,nosmurfs,logmartians=1,routefilter=1,sourceroute=0
+ loc WIFI1IF
optional,physical=$IWLAN1,dhcp,tcpflags,nosmurfs,logmartians=1,routefilter=1,sourceroute=0
or
- wifi1 WIFI1IF
optional,physical=$IWLAN1,dhcp,tcpflags,nosmurfs,logmartians=1,routefilter=1,sourceroute=0
+ - WIFI1IF
optional,physical=$IWLAN1,dhcp,tcpflags,nosmurfs,logmartians=1,routefilter=1,sourceroute=0
be the way to do that? (Not 100% clear yet on the implications of that "-").
DT
------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot
_______________________________________________
Shorewall-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/shorewall-users
