1 WAN 3 LAN - Blocking LAN ports from each other.

[SparcV]

Here's my setup

WAN - Cable modem
LAN - 192.168.1.0/24
OPT1 - 10.0.0.0/24
OPT2 - 172.0.0.0/24

I want to block traffic from going across the LAN ports but still be able to access the internet via the WAN port
I have setup firewall rules to block each others subnet, but it does not seem to do anything.
Im running 1.0 Beta 2

[hoba]

Make sure the rules order is correct (first match). However, without seeing your rules we can't really help you.

[SparcV]

@hoba:

Make sure the rules order is correct (first match). However, without seeing your rules we can't really help you.

LAN
Proto  Source  Port  Destination  Port  Gateway  Description

• OP1 net * * * * Block OP1
    * OP2 net * * * * Block OP2
• LAN net * * * * Lan to Any

OP1
Proto  Source  Port  Destination  Port  Gateway  Description

• LAN net * * * * Block LAN
    * OP2 net * * * * Block OP2
• OP1 net * * * * OP1 to Any

OP2
Proto  Source  Port  Destination  Port  Gateway  Description

• LAN net * * * * Block LAN
    * OP1 net * * * * Block OP1
• OP2 net * * * * OP2 to Any

Those are the rules i have set for each port

[hoba]

Yeah, those are wrong.

at LAN:
block, proto any, source any, destination OPT1 subnet
block, proto any, source any, destination OPT2 subnet
pass, proto any, source lan subnet, destination any (default LAN to any)

at OPT1:
block, proto any, source any, destination LAN subnet
block, proto any, source any, destination OPT2 subnet
pass, proto any, source OPT1 subnet, destination any

at OPT2:
block, proto any, source any, destination LAN subnet
block, proto any, source any, destination OPT1 subnet
pass, proto any, source OPT2 subnet, destination any

You always block incoming traffic at an interface.