monowall at leinonen dot org skrev:
> Hi all,
>
> I just setup my fw and i create some vlans. Now i have intresting
> situation for my fw rules and interfaces. Lets say that i have prodnet 
> int
> and mgmtnet int, now i want to make fw rule that allows telnet and ssh
> from prodnet to mgmtnet and deny everything else. So my rules should be
> like this (i also want there is no limitations for prodnet traffic)?
>
> prodnet:
> Rule Proto Source  Port Destination Port
> Pass TCP   prodnet *    mgmtnet     22
> Pass TCP   prodnet *    mgmtnet     23
> Deny *     *       *    mgmtnet     *
> Pass *     prodnet *    *           *
>
> mgmtnet:
> Rule Proto Source  Port Destination Port
>
> But now some reason i can take eg http session from prodnet to 
> mgmtnet. Is
> there some limitations for filtering or do i missunderstand something?
> I running 1.21 version.
>   
You can do it like this as m0n0 only check incoming traffic on the 
interface.

-- 
Rasmus Fauske