thanks for the input.

to get internet working on OPT1 i had to add a rule to allow from OPT1
to any. i had to add a block rule above this to block traffic from
OPT1 to LAN. is there another way getting internet working on OPT1?
something like allow interface OPT1 to WAN but i couldn't figure this
out from the gui and i have been searching list archives/forum/etc and
not found an answer.


On Sun, Oct 25, 2009 at 5:43 AM, Thomas Koch <tikay dot event at googlemail dot com> wrote:
> The Default-Rule allows accessing everything, even other networks.
>
> 2009/10/25 slamp slamp <slackamp at gmail dot com>
>
>> i wanted to separate my wifi from my internal lan.
>>
>> vlan 5 - LAN - 192.168.1.0/24
>> vlan 10 - OPT1 - 192.168.2.0/24
>>
>> i have a cisco 2950.
>>
>> i can access each network from each side. i dont know why as i dont
>> have rules allowing them to access one another. i only have the
>> default rule. any ideas?
>>
>> ---------------------------------------------------------------------
>> To unsubscribe, e-mail: m0n0wall dash unsubscribe at lists dot m0n0 dot ch
>> For additional commands, e-mail: m0n0wall dash help at lists dot m0n0 dot ch
>>
>>
>