[ previous ] [ next ] [ threads ]
 From:  "henry" <henry at ttcomaha dot com>
 To:  m0n0wall at lists dot m0n0 dot ch, <googl3meister at gmail dot com>
 Subject:  Re: [m0n0wall] Newbie help
 Date:  Wed, 29 Jun 2005 21:14:14 -0500
Do you know what file do I need to change on the firewall so the firewall will save these changes
ona reboot?

On Thu, 30 Jun 2005 10:03:56 +1000,   <googl3meister at gmail dot com> wrote:
> On 6/30/05, henry <henry at ttcomaha dot com> wrote:
> > I am new to Monowall and I need help.  I have 2 physical interfaces in my
>  box and that works fine.  Now I need to add 3 more subnets to the LAN side
>  of the box.  I've tried using VLANS but I can not get it to pass traffic t
> o or from the VLANS.  The primary subnet is  I need to add
>, and  Any insight would be helpf
> ul.
> > 
> Unless you have VLAN-aware switches in your LAN then it's not going to
> work - sorry.  You actually don't need VLANs for this to work, just
> assign the extra addresses to m0n0's LAN interface - test with
> exec.php:
> ifconfig {LAN-device} inet {new-IP} netmask {eg: - for the 
> /28s}
> eg:
> ifconfig sis1 inet netmask alias
> ifconfig sis1 inet netmask alias
> ifconfig sis1 inet netmask alias
> For each subnet, make the relevant m0n0 address the gateway for those
> machines.  You will need to add specific rules to allow the packets in
> on the LAN interface, because the default rule that allows everything
> in from the LAN will apply *only* to the packets which match the
> address you have given the LAN interface in the GUI - this is
> important, because m0n0 will (by default) block these other packets,
> since they do not match the LAN interface network address.
> ie: in your scenario the default LAN rule allows the
> source addressed packets to go anywhere.  When you add the three extra
> IP's above, you will need to add three extra rules to m0n0 (just click
> the + next to the existing rule and modify the source address/mask as
> required).
> Whether you want them to be able to access each other is another
> story.  Using rules as I have descibed above will let that happen,
> since a copy of the default rule will allow any destination, including
> those on the same LAN.
> --g'luck
> gm