>> I don't know what you are trying to accomplish with this amazing setup >> but, whatever it is, surely there must be a better way. >> >> Nevertheless, you should be able to do what you want by: >> >> /etc/shorewall/interfaces >> >> vlan eth0.+ ... >> > > And you _do_ need the 'routeback' option. > > -Tom > -- > Tom Eastep \ Nothing is foolproof to a sufficiently talented fool > Shoreline, \ http://shorewall.net > Washington USA \ [EMAIL PROTECTED] > PGP Public Key \ https://lists.shorewall.net/teastep.pgp.key >
hi, ok thank you ... pls confirm me, if i've understood it correctly with the routeback option all vlans can access each other which i will prevent in the policy-file and then i have to permit in the rules-file which subnets have access to the external IPs ... have a nice weekend felix _________________________________________________________________ Keine Mail mehr verpassen! Jetzt gibt’s Hotmail fürs Handy! http://www.gowindowslive.com/minisites/mail/mobilemail.aspx?Locale=de-de ------------------------------------------------------------------------- This SF.net email is sponsored by the 2008 JavaOne(SM) Conference Don't miss this year's exciting event. There's still time to save $100. Use priority code J8TL2D2. http://ad.doubleclick.net/clk;198757673;13503038;p?http://java.sun.com/javaone _______________________________________________ Shorewall-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/shorewall-users
