-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 On 03/13/2017 08:53 AM, [email protected] wrote: > Tom > > On Mon, Mar 13, 2017, at 08:43 AM, Tom Eastep wrote: >>> What I would do is simply add wlan1 to the loc zone. > > That's slick. I didn't think I could do that because it's on a > different LAN segment. Re-reading the docs, I clearly got that > mixed up! > >> Make that the 'lan' zone. > > Yep I figured :-) > > Ok let's take a look. > > Atm, I have > > interfaces net EXTIF > optional,physical=$IETH0,dhcp,tcpflags,nosmurfs,logmartians=1,routefilter=1,sourceroute=0 > > wifi0 WIFI0IF optional,physical=$IWLAN0,dhcp,tcpflags,nosmurfs,logmartians=1,routefilter=1,sourceroute=0 > wifi1 WIFI1IF > optional,physical=$IWLAN1,dhcp,tcpflags,nosmurfs,logmartians=1,routefilter=1,sourceroute=0 > > - - INTIF physical=$IETH1,dhcp,tcpflags,logmartians=1,routefilter=0 > > To "simply add wlan1 to the loc zone", would just changing the > 'wifi1' line to > > - wifi1 WIFI1IF > optional,physical=$IWLAN1,dhcp,tcpflags,nosmurfs,logmartians=1,routefilter=1,sourceroute=0 > > + loc WIFI1IF optional,physical=$IWLAN1,dhcp,tcpflags,nosmurfs,logmartians=1,routefilter=1,sourceroute=0 >
That's the correct thing to do. - -Tom - -- Tom Eastep \ Q: What do you get when you cross a mobster with Shoreline, \ an international standard? Washington, USA \ A: Someone who makes you an offer you can't http://shorewall.net \________________________________________________ -----BEGIN PGP SIGNATURE----- Version: GnuPG v2 Comment: GPGTools - http://gpgtools.org iQIcBAEBCAAGBQJYxsSrAAoJEJbms/JCOk0QWykP/39Zam7B1jFC5oFpQX0vPEH9 j32Hg67jh7mKUslW6h0diiQRs3Uncq7NIgt5+gkeMEHx1NWVQl5cuebo7wfiwjwp Tf3DsW60alPsPHIY116U/FRrHpi5Al+z0Bl09NLNQvnVG3lF2pfw5UdvbNJKzRDE AqMDp1SojanZ6RL2AqcqWYiIGXrnGCmRS6Bda6KCdPwU5+R+nXsaSEgQukPmPUxh GLIYOkLfuHZKCXQWw0VNvc2yRjUFPD1i2H5N77QSQwbeg7IHbG/xhuJAuB1xM0wk oH2iG/60Cz7kRSv+o1R28Dqfkd/xfNj7ZgdX16suhySTnehIiOWdhumvfnHnqzvN Dmb0Z424eDwyrKTCA3r7klM5Y8iEJLgqn764dqiX88NqncBcZbIYbNMuoV/drE9/ gyRqbYOfzaW84fItKTlt2QHJubJpdVd3h6s2coYm5G0E0EYy1JfVh5CeoOLUrDBB OSjOcULgQQwAYhWxI64nRaepRKsIxvbd8/W5EOCjqlTr2mo4AhEjDlJTC2mt3USr 9kLvLf5WJSg9qV7QIN82eE77EGSIftiNUmPHr8vf3tZ5ZPsGcaJzZdCrL4hAXY7X yVKUVnp76WnIeGJsAcHxB3x/h97dSrqajRNpglQSJ6IRv+wlu7pmnwpxuX5re1Nm PbteVXHxpAfbvzC/664u =nXlm -----END PGP SIGNATURE----- ------------------------------------------------------------------------------ Check out the vibrant tech community on one of the world's most engaging tech sites, Slashdot.org! http://sdm.link/slashdot _______________________________________________ Shorewall-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/shorewall-users
