Hello Justin, On Wed, Nov 25, 2020, at 6:08 AM, Justin Pryzby wrote: > On Wed, Nov 25, 2020 at 05:35:41AM -0800, dav...@postpro.net wrote: > > What Shorewall ruleset do I need to just allow this guest access to the > > internet but keep it isolated to its 10.16.1.X segment? > > You should look for logfile entries showing why not, and send a debugging dump > to the list.
I was just asking for what TO do the right way. Is there a documentation or example on the site for that case maybe? Right now when I try to do anything from the 10.16.1.X LAN "Guest", like `ping 1.1.1.1` or visit any site in a browser I don't see any logs about it at Shorewall. I do see logs for all the dropped traffic for the 172.16. rules. So maybe how do your turn on the logging for ALL of the 10.16.1.X traffic to and from the Guest machine? Dave _______________________________________________ Shorewall-users mailing list Shorewall-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/shorewall-users
