It looks like 10.10.10.1/24 is your LAN net for your m0n0, and
192.168.1.1 is your WAN. Is that correct?

I think that this kind of block rule should work...

proto source            port        dest                 port
 tcp  10.10.10.199   *            192.168.1.1/24 *

On 10/31/06, PixSell <pixsell at gmail dot com> wrote:
> I use A wrap with  2 LAN but no OPT
> So I cant do what you propose me to do
> I need a solution with this network setting
>
>
> ORIGINAL MESSAGE WAS:
>
>  Hi everybody,
>
> Can anyone tell me if this rule is correct ?
>
> I would like to deny the range from ( 10.10.10.199 to 10.10.10.11) to access
> to 192.168.1.*
>
> My network: http://sotradema.free.fr/network.jpg
>
> the 3 rules I made: http://sotradema.free.fr/mono.jpg
>
> If not correct , please send me a screenshot to show me the correct rules
>
> I really appreciate your help
>
> Thank you
>
> th
>
>