-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 On 03/14/2017 08:49 AM, darrin.tho...@123mail.org wrote: > With the setup advised in this thread, I've got > secure/authenticated connectivity for the adapter; I can login with > specified used credentials from my test-device -- my Android > phone. > > Once connected, I can run a speed test -- and performance is GREAT: > 75Mbps x 25Mbps. > > Unfortunately, that's NOT my LAN/ISP connection -- that's > Cell-network speeds !? > > If I turn OFF my phone's "Mobile Networks", leaving ONLY the WiFi > connectivity, there's no more connectivity at all. > > If I turn on info=level logging in policy for the Wifi zone, > > net wifi0 ACCEPT info wifi0 net ACCEPT info all wifi0 > REJECT info wifi0 all REJECT info > > > I do see plenty of these > > Mar 14 08:31:21 rbox kernel: [53995.695471] SW:[P4]wifi02net:ACCEPT > IN=wlan0 OUT=enp1s0 SRC=10.128.128.200 DST=8.8.8.8 LEN=63 TOS=0x00 > PREC=0x00 TTL=63 ID=27812 DF PROTO=UDP SPT=15906 DPT=53 LEN=43 > > Mar 14 08:31:21 rbox kernel: [53995.809845] SW:[P4]wifi02net:ACCEPT > IN=wlan0 OUT=enp1s0 SRC=10.128.128.200 DST=8.8.4.4 LEN=73 TOS=0x00 > PREC=0x00 TTL=63 ID=27824 DF PROTO=UDP SPT=23073 DPT=53 LEN=53 > > which clearly shows traffic going out the physical ethernet through > my ISP connection, but no other traffic. > > I also have in rules > > DHCPfwd(ACCEPT) $FW wifi0 Ping(ACCEPT) $FW wifi0 > > I've obviously missed something. Again. > > What do I need to get ALL the traffic to/from the WiFi-attached > cell-phone working over WiFi only? >
Please forward the output of 'shorewall dump' collected as described at http://www.shorewall.net/support.htm#Guidelines Thanks, - -Tom - -- Tom Eastep \ Q: What do you get when you cross a mobster with Shoreline, \ an international standard? Washington, USA \ A: Someone who makes you an offer you can't http://shorewall.net \________________________________________________ -----BEGIN PGP SIGNATURE----- Version: GnuPG v2 Comment: GPGTools - http://gpgtools.org iQIcBAEBCAAGBQJYyC2ZAAoJEJbms/JCOk0QhH8QAJbEM9LWm3ZCibhva7pMHFsE 76V+Vw75TjVndsOGYTQKggvaSdJQTiv7Wd5k4NdEKqzQW/y9V1hOiRe+nIjzmkrw nbu/kIVhJXbJPmAprJm0mALjMkXyrzGCJTzAjeeDWL7J/aCtEcNJFhrqRde0Bjtc 4YMYxqAQTVuktBhstBGXsyL/9J/tMhirgqWrDbLgYzdqj8DwleQL89IyoZ1pasPL sFfXgiuD7dla/Ws5dgOCXKR7H9E57B0SAkqHOG7iL6Li4NzAke/drG05xbVMsHXE NXnkluAXjzN5iTRLMIY06+dR3q01Kk1HK+SPpfb/g80CnlxRBUtpxXUGcuNWi/2H JE/FVfAkEVWKMcF4618rWfBHg8Zclz6mvEqr/rBStvtWF8Q4GdCU7vPx3u8hUMNj SWD8MyEtd3cwvSxxSdIqAed+VBdWuyFFVwi7aL0dit8VG5CO4/9kYBBvqp0TQCuQ 1lu3Xtw1p3dBYsQg6l0yMhhgzkH7nUugdNHccW7/kWSgLxVJXMf3vB7PznoBrVgN X/4KHqa5AOFFyt2Dtv070aIFTBIS1uBgU32bNIA80oUovKYm0iXBUU/3Vc2Dh98r BqZRGvIU+wb/ySDD5EHLT+EYWpT8lhbO6hriQPMAgIj0DHgVRBBxH/nl+0Euo2Kz oUpWxfKyZXFD2gN3HZtK =bhwd -----END PGP SIGNATURE----- ------------------------------------------------------------------------------ Check out the vibrant tech community on one of the world's most engaging tech sites, Slashdot.org! http://sdm.link/slashdot _______________________________________________ Shorewall-users mailing list Shorewall-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/shorewall-users
