I do it on the LAN interface.

You can make a rule either blocking/allowing traffic to the destination 
network 192.168.1.0/24 (or whatever your destination subnet happens to 
be) for example.

This has worked for me.

Andy

-------- Original Message  --------
From: "James Corlew" <jcorlew at atlasdev dot com>
To: "C. Andrew Zook" <andrewzook at pdqlocks dot com>
Subject: Re:[m0n0wall] IPSEC tunnel firewall rule
Date: 04/11/2006 1:28 PM

> Hi, Thanks for you reply.
>
> So when setting that up what do you choose for the incoming interface?
> WAN or LAN? I assumed there would be an IPSEC option there if it was
> possible.
>
>
>
> -----Original Message-----
> From: C. Andrew Zook [mailto:andrewzook at pdqlocks dot com] 
> Sent: Tuesday, April 11, 2006 10:21 AM
> To: James Corlew
> Subject: Re: [m0n0wall] IPSEC tunnel firewall rule
>
> It doesn't seem to be true anymore - on 1.22 anyhow. I had to put some 
> rules into place on mine.
>
> Andy
>
> -------- Original Message  --------
> From: "James Corlew" <jcorlew at atlasdev dot com>
> To: m0n0wall at lists dot m0n0 dot ch
> Subject: [m0n0wall] IPSEC tunnel firewall rule
> Date: 04/11/2006 1:17 PM
>
>   
>> I read that you can't apply firewall rules to ipsec VPN traffic. Is
>>     
> this
>   
>> still true? Are there any plans for changing this in the future?
>>
>>  
>>
>>
>>   
>>