On 1/29/2018 7:49 PM, Bernard Drozd wrote: >> From what you describe below you should maybe use: >> http://shorewall.org/three-interface.htm > > I guess I need the guidance from: > http://shorewall.org/two-interface.htm#Wireless > LAN and WLAN works in the same zone > >> What did you try... > I tried (/etc/shorewall/snat) > MASQUERADE 10.10.10.0/24 enp1s0 > MASQUERADE 10.10.11.0/24 enp1s0 >
"MASQUERADE should only be used when the DEST interface has a dynamic IP address. Otherwise, SNAT should be used and should specify the interface's static address." > and > SNAT(192.168.15.145) 10.10.10.0/24 enp1s0 > SNAT(192.168.15.145) 10.10.11.0/24 enp1s0 > http://shorewall.org/manpages/shorewall-snat.html >>...and what do you want? > I would like to connect to the internet from LAN (10.10.10.0/2) and WLAN > ((10.10.11.0/2)) > Try to set 'IP_FORWARDING=Yes' in /etc/shorewall/shorewall.conf. -Matt -- Matt Darfeuille ------------------------------------------------------------------------------ Check out the vibrant tech community on one of the world's most engaging tech sites, Slashdot.org! http://sdm.link/slashdot _______________________________________________ Shorewall-users mailing list Shorewall-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/shorewall-users
