[ previous ] [ next ] [ threads ]
 
 From:  Josh Hyles <josh dot maillists at gmail dot com>
 Cc:  m0n0wall at lists dot m0n0 dot ch
 Subject:  Re: [m0n0wall] m0n0wall + segmented networks
 Date:  Fri, 16 Sep 2005 11:52:09 -0400
Right, but how do you do that exactly? and is a DMZ really the best way? I 
still want people on the wifi to be protected by the firewall and such, and 
I want to allow access to just the printer on the LAN

On 9/16/05, Tom Anderson <tom at haremail dot net> wrote: 
> 
> You want to set up a DMZ on the optional interface and allow all traffic
> from the DMZ to WAN, while blocking all traffic to the LAN.
> 
> ----- Original Message -----
> From: "Josh Hyles" <josh dot maillists at gmail dot com>
> To: <m0n0wall at lists dot m0n0 dot ch>
> Sent: Friday, September 16, 2005 8:38 AM
> Subject: [m0n0wall] m0n0wall + segmented networks
> 
> 
> I am really new to all of this, so please excuse my lack of proper
> terminology. Basically what I am trying to do is setup a 3 network card
> m0n0wall that will allow for a LAN, WAN, and a WLAN via a linksys router. 
> I
> have a m0n0wall with three cards in it, but I have no clue as to what I 
> need
> to do in order to get them working. The goal of this is to make the WLAN
> completely separate from the rest of the network so if someone does jump 
> on
> the WiFi, all they get is internet and not access to the rest of my
> computers on the LAN. I'm sure this has been done a million times before 
> but
> I am not sure what you call it and am not able to search. Searching on 
> this
> maillist is a pain cause it doesnt group the threads together and you have
> to search for all the replies (maybe I'm doing it wrong, is there a better
> way?) So here is a list of what I am trying to do..
> -setup m0n0wall with 3 networks (WAN, LAN, WLAN) public.ip,
> 10.0.0.1 <http://10.0.0.1><http://10.0.0.1>,
> 10.0.1.1 <http://10.0.1.1> <http://10.0.1.1>
> -secure/block traffic from WLAN to LAN, but allow full access to WAN
> -punch a whole through from WLAN to LAN for ip printing
> (10.0.0.10 <http://10.0.0.10><http://10.0.0.10>
> )
> Thanks in advance to whoever can point me in the right direction, even if
> its just the right term for what I'm trying to do.
> Josh.
> 
> 
> 
> 
> --
> No virus found in this outgoing message.
> Checked by AVG Anti-Virus.
> Version: 7.0.344 / Virus Database: 267.11.0/103 - Release Date: 9/15/2005
> 
> 
>