Vittore Zen wrote:
> My network:
> 
>                        DMZ
>                         ^
>                         |
> public ip 1 <-------> m0n0 1 <----
>                                 |
>                                 +--> LAN
>                                 |
> public ip 2 <-------> m0n0 2 <----
>                         |
>                         |
>                      Wifi LAN
> 
> 
> m0n0 2 has a static route for DMZ to m0n0 1
> m0n0 1 has a static route for Wifi LAN to m0n0 2
> 
> m0n0 1 rules permit:
> - any traffic from LAN
> - any traffic from WAN to DMZ
> - no traffic from DMZ to LAN
> 
> m0n0 2 rules permit:
> - any traffic from LAN
> - any traffic from Wifi LAN to LAN
> - no traffic from WAN
> 
> 
> 
> hosts in LAN can ping and connect to hosts in DMZ
> hosts in LAN can ping but no connect to hosts in Wifi LAN. Why?
> 
> 
> thanks in advance
> v.

What is your question exactly?

- If that would work?
- If that's the best setup for what you want to achieve?

Do you want to do WAN load balancing?

Regards,

Ugo