With the setup advised in this thread, I've got secure/authenticated 
connectivity for the adapter; I can login with specified used credentials from 
my test-device -- my Android phone.

Once connected, I can run a speed test -- and performance is GREAT: 75Mbps x 
25Mbps.

Unfortunately, that's NOT my LAN/ISP connection -- that's Cell-network speeds !?

If I turn OFF my phone's "Mobile Networks", leaving ONLY the WiFi connectivity, 
there's no more connectivity at all.

If I turn on info=level logging in policy for the Wifi zone,  

        net    wifi0   ACCEPT info
        wifi0  net     ACCEPT info
        all    wifi0   REJECT info
        wifi0  all     REJECT  info


I do see plenty of these

        Mar 14 08:31:21 rbox kernel: [53995.695471] SW:[P4]wifi02net:ACCEPT 
IN=wlan0 OUT=enp1s0  SRC=10.128.128.200 DST=8.8.8.8 LEN=63 TOS=0x00 PREC=0x00 
TTL=63 ID=27812 DF PROTO=UDP SPT=15906 DPT=53 LEN=43

        Mar 14 08:31:21 rbox kernel: [53995.809845] SW:[P4]wifi02net:ACCEPT 
IN=wlan0 OUT=enp1s0  SRC=10.128.128.200 DST=8.8.4.4 LEN=73 TOS=0x00 PREC=0x00 
TTL=63 ID=27824 DF PROTO=UDP SPT=23073 DPT=53 LEN=53

which clearly shows traffic going out the physical ethernet through my ISP 
connection, but no other traffic.

I also have in rules

DHCPfwd(ACCEPT)  $FW  wifi0
Ping(ACCEPT)  $FW  wifi0

I've obviously missed something.  Again.

What do I need to get ALL the traffic to/from the WiFi-attached cell-phone 
working over WiFi only?

DT

------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot
_______________________________________________
Shorewall-users mailing list
Shorewall-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/shorewall-users

Reply via email to