On 4/11/2014 11:53 AM, n22e113 wrote: > On 4/11/2014 12:22, Erich Titl wrote: >> Q2. Am I missing something else? >> routes and shorewall settings? > Hi, Erich, > # ip route > default via 192.168.72.254 dev eth0 metric 206 > 192.168.0.0/24 dev wlan0 proto kernel scope link src 192.168.0.254 > 192.168.1.0/24 dev eth1 proto kernel scope link src 192.168.1.254 > 192.168.72.0/24 dev eth0 proto kernel scope link src 192.168.72.213 metric 206 > > /etc/shorewall/interface > net eth0 dhcp > loc eth1 dhcp > wlan wlan0 dhcp > > /etc/shorewall/masq > eth0 192.168.1.0/24 > wlan0 192.168.0.0/24
should be "eth0 192.168.0.0/24" for wlan0 you are masq from eth0 to wlan0 not from wlan to itself > > /etc/shorewall/rules > SECTION NEW > #Testing from upstream router > ACCEPT net:192.168.72.0/24 fw tcp 22,80 > # > ACCEPT wlan net tcp 25,53,80,110,443,465,587,873,993 > DNS(ACCEPT) wlan fw > > /etc/shorewall/zones > fw firewall > net ipv4 > loc ipv4 > wlan ipv4 > For shorewall, the above are the only changes for testing. > Many thanks! > Kwon > > Victor ------------------------------------------------------------------------------ Put Bad Developers to Shame Dominate Development with Jenkins Continuous Integration Continuously Automate Build, Test & Deployment Start a new project now. Try Jenkins in the cloud. http://p.sf.net/sfu/13600_Cloudbees ------------------------------------------------------------------------ leaf-user mailing list: leaf-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/leaf-user Support Request -- http://leaf-project.org/