From your diagram, it appears you have a Soekris 4801 running  
m0n0wall. Correct?

If so, I would suggest putting the m0n0wall WAN directly to the  
incoming internet 10.0.0.138 (private?) connection.

The m0n0wall LAN would connect to your wired 192.168.1.x/24 clients.   
(Maybe the Linksys router shown could be replaced with a small switch?)

The m0n0wall OPT would connect to your wireless 10.10.10.x/24 clients.

Study all the m0n0wall help docs, and teach yourself the how the WAN/ 
LAN/OPT relate to each other.

Lonnie


On Oct 30, 2006, at 7:52 PM, PixSell wrote:

> Hi everybody,
>
> Can anyone tell me if this rule is correct ?
>
> I would like to deny the range from ( 10.10.10.199 to 10.10.10.11)  
> to access
> to 192.168.1.*
>
> My network: http://sotradema.free.fr/network.jpg
>
> the 3 rules I made: http://sotradema.free.fr/mono.jpg
>
> If not correct , please send me a screenshot to show me the correct  
> rules
>
> I really appreciate your help
>
> Th