[ previous ] [ next ] [ threads ]  To:  "Tonix (Antonio Nati)"
<tonix at interazioni dot it>, "Falcor" <falcor at netassassin
dot com>  Subject:  RE: [m0n0wall-dev] Redesigning m0n0wall
filter rules  Date:  Wed, 6 Feb 2008 11:28:32 -0500          I
think what Falcor was trying to say was that Monowall handles
inbound and outbound rules in terms of the entire box, not the
individual interface.            Perhaps there is an easier way
to do what you are looking to do...  Let's look at your example
again  >Please set up this filter with the minimum rules
possible. This is a  >very simple network, so it is not a
personal case. >    Interface A: sub-net, no NAT >    Interface
B: sub-net, no NAT >    Interface C: sub-net, no NAT >
Interface D, sub-net, no NAT >    Interface E, sub-net, no NAT
>None can access sub-lans in A,B,C,D. >Anyone can access any
port 80 in interface E.  Let's say there is one more interface,
WAN.  To make it more realistic, lets give some IP Addresses to
there subnets.     To do what you want in this