|
||||||||
Two issues I'm butting up against with 1.1 for generic PCs. First: no support for Disk on Chip (fla) devices, so I have to hang an IDE Sandisk flash module in my box. As far as I know, fla support doesn't break anything, and shouldn't increase kernel size appreciably, any chance of getting it included in the generic pc kernel conf in future releases? Second, if I change my lan ip to 192.168.151.1/26, the m0n0wall box stops responding to network traffic all together. The only way to recover is to pop on the console and change the ip back to default or reset the conf completely. As there isn't a standard shell and the web interface is inacessable, I'm not sure how to diag. Suggestions? In the nitpick category: Run time option for serial consoles? Should just be a matter of including getty, and a web toggle for which probed ports to enable it on. ICMP is blocked on the WAN port by default. Nasty bad choice. As per RFC 792, and later RFC 2979 parts of ICMP are used for normal operation. Global ICMP blocks can break / degrade tcp/ip operation. If anything must be nuked out of the box, a selective filter based on RFC 2979 seems more appropriate, with the added bonus of legitimizing an 'RFC Compliant' sticker. :) Other than that, looks good so far. Joshua Coombs http://www.outofspec.com |