Allow service on local network only

Installing and Using OpenWrt Network and Wireless Configuration
21

So finally I succeeded by removing the bridge interface (which was useless here) and I directly configured my eth0 and then I have configured my zones as follow:

config zone 'vpn'
        option name 'vpn'
        list subnet '10.0.0.0/24'
        option input 'ACCEPT'
        option output 'ACCEPT'
        option forward 'ACCEPT'

config zone 'lan'
        option name 'lan'
        list subnet '192.168.1.0/24'
        option input 'ACCEPT'
        option output 'ACCEPT'
        option forward 'ACCEPT'

config zone 'wan'
        option name 'wan'
        list subnet '!192.168.1.0/24'
        list subnet '!10.0.0.0/24'
        option input 'DROP'
        option output 'ACCEPT'
        option forward 'DROP'
22

This works as a union of disjoint complements, that is a universal set.
I.e. the result is the same as using 0.0.0.0/0 and that looks wrong.

23

And is there a way to say "everything but these networks" or should I just put '0.0.0.0/0' and the traffic concerning the two other zones will be catched before this one?

24

This topic was automatically closed 10 days after the last reply. New replies are no longer allowed.