Couldn't you just install multiple NIC's (more than 3)with a static
route between networks and apply traffic filtering rules for a given
On Wed, 23 Mar 2005 16:27:10 +0100, Peter ParniÄŤan <peter at procad dot sk> wrote:
> Yes you are both right, its strange i know but i need it because im trying
> to have 4 subnets behind m0n0.
> First 188.8.131.52/24 working perfectly I can access m0n0 (webGui) without
> problem. But I want to use more subnets ..10.0, ..100.0 etc. with one NIC
> I think it should be possible: because i found short description in advance
> setup ...look at Last sentence (propably Manuel wrote it)::
> (Static route filtering: This option only applies if you have defined one
> or more static routes. If it is enabled, traffic that enters and leaves
> through the same interface will not be checked by the firewall. This may be
> desirable in some situations where multiple subnets are connected to the
> same interface.)
> And reason why? ...i had talk with some admin guys (ISP) and they told me
> this is easyst way how to do "isolation mode" ..but only for not very
> experienced users... in my case more than 90% of current users at the
> network. Its because I want control traffic speed between users... some of
> them are naughty and and are copying big files over wifi access point (copy
> just between users, not downloading from internet). Therefore as soon as
> they will be in different subnets all traffic will pass m0n0 not only
> wirelles access ponit.
> m0n0----wire----AP1 ::::::wirelless bridge:::::: AP2 :::::::::::: X
> wirelless users::
> ----- Original Message -----
> From: "Don Munyak" <don dot munyak at gmail dot com>
> To: "Peter ParniÄŤan" <peter at procad dot sk>
> Cc: <m0n0wall at lists dot m0n0 dot ch>
> Sent: Wednesday, March 23, 2005 3:54 PM
> Subject: Re: [m0n0wall] static route
> If the PC is on the LAN "wire" then the LAN interface needs to be in
> the network address 192.168.10.0 /24
> I think what you are trying can't be done without assigning two IP
> addresses to the LAN interface...184.108.40.206 and 192.168.10.1, and I don't
> think m0n0wall can do that. I could be wrong though.
> Is there some reason why you need the LAN interface setup as 220.127.116.11 ?
> If your going to keep the pc address as 192.168.10.8/24 , I would
> assign the m0n0wall LAN ip as 192.168.10.1/24
> - Don
> On Wed, 23 Mar 2005 15:01:45 +0100, Peter ParniÄŤan <peter at procad dot sk> wrote:
> > Hi guys, i want ask if ill should be able to reach m0n0 (18.104.22.168) if my IP
> > is 192.168.10.8 and m0n0 LAN is set to 22.214.171.124/24 network.
> > I have add a static route 192.168.10.0/24, gateway 126.96.36.199 and Static
> > filtering: Bypass firewall rules for traffic on the same interface is
> > anabled in ADVANCED setup.
> > If is it OK why can't access m0n0?
> > thx. Pet
> > ---------------------------------------------------------------------
> > To unsubscribe, e-mail: m0n0wall dash unsubscribe at lists dot m0n0 dot ch
> > For additional commands, e-mail: m0n0wall dash help at lists dot m0n0 dot ch