Help with setting firewall rules correctly
-
Please can someone help with some rules that aren't working the way I expect.
I have 2 networks. One network should only be able to communicate with it's own network, and otherwise block all other incoming traffic. The other should be able to communicate with everything (the internet), but block any other LAN traffic. Here are the rules:
WLAN10
block ipv4+6* source: rfc1928 addresses port: * destination: wlan10 net port: *WLAN40
pass ipv4+6 * source: wlan40 net port: * destination: * port: *
block ipv4+6* source: rfc1928 addresses port: * destination: wlan10 net port: *But, when connected to the WLAN40 network I am able to ping across to the WLAN10 network. Why is an RFC1918 address able to do that?
-
@n1md4 rules apply to traffic arriving on the interface. They also apply in order.
So on WLAN40 you probably want to:
Block from WLAN40 Net to WLAN10 Net
Allow from WLAN40 Net to any