With the setup advised in this thread, I've got secure/authenticated connectivity for the adapter; I can login with specified used credentials from my test-device -- my Android phone.
Once connected, I can run a speed test -- and performance is GREAT: 75Mbps x 25Mbps. Unfortunately, that's NOT my LAN/ISP connection -- that's Cell-network speeds !? If I turn OFF my phone's "Mobile Networks", leaving ONLY the WiFi connectivity, there's no more connectivity at all. If I turn on info=level logging in policy for the Wifi zone, net wifi0 ACCEPT info wifi0 net ACCEPT info all wifi0 REJECT info wifi0 all REJECT info I do see plenty of these Mar 14 08:31:21 rbox kernel: [53995.695471] SW:[P4]wifi02net:ACCEPT IN=wlan0 OUT=enp1s0 SRC=10.128.128.200 DST=8.8.8.8 LEN=63 TOS=0x00 PREC=0x00 TTL=63 ID=27812 DF PROTO=UDP SPT=15906 DPT=53 LEN=43 Mar 14 08:31:21 rbox kernel: [53995.809845] SW:[P4]wifi02net:ACCEPT IN=wlan0 OUT=enp1s0 SRC=10.128.128.200 DST=8.8.4.4 LEN=73 TOS=0x00 PREC=0x00 TTL=63 ID=27824 DF PROTO=UDP SPT=23073 DPT=53 LEN=53 which clearly shows traffic going out the physical ethernet through my ISP connection, but no other traffic. I also have in rules DHCPfwd(ACCEPT) $FW wifi0 Ping(ACCEPT) $FW wifi0 I've obviously missed something. Again. What do I need to get ALL the traffic to/from the WiFi-attached cell-phone working over WiFi only? DT ------------------------------------------------------------------------------ Check out the vibrant tech community on one of the world's most engaging tech sites, Slashdot.org! http://sdm.link/slashdot _______________________________________________ Shorewall-users mailing list Shorewall-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/shorewall-users