I'm trying to reduce the amount of firewall rules for a bigger configuration with multiple networks, and had the idea to put networks in shared overlapping zones. From Single network interface in multiple firewall zones? and own experiments i know that i can put a single lan only in excatly one z…

[image] CarstenSp: From Single network interface in multiple firewall zones? and own experiments i know that i can put a single lan only in excatly one zone. If you already know this, it seems a bit odd that you have put lan1 into two zones. This certainly will not work. [image] Carste…

Sorry, i did a mistake when editing the example config, The forwarding is config forwarding option src 'internet' option dest 'wan' config forwarding option src 'printer' option dest 'lan-printer' I edited this in the original post, but nevertheless, the problem is still there. Sure, it's p…

You can reduce the number of rules by optimizing your threat model . Networks with similar threats can be assigned to the same zone.

OpenWrt Forum

Interfaces in multiple firewall zones

Feature Requests

lleachii July 15, 2023, 8:38am 4

Single network interface in multiple firewall zones? Installing and Using OpenWrt

No. You cannot (even if is physically possible to do it via LuCI). Your firewall will not work properly or predictably if you attempt this. Each network must be assigned to at most one firewall zone (typically it would be exaclty one, but you can actually leave a network unassociated with a firewall zone). You can allow or deny intra-zone forarding, allow zone > zone forwardings (or deny them by not explicitly allowing them), and/or you can make more granular rules at the network or host level…

show post in topic

Home
Categories
Guidelines
Terms of Service
Privacy Policy

Powered by Discourse, best viewed with JavaScript enabled