[Cerowrt-devel] zones for other subnets

[Michael Richardson <mcr@sandelman.ca>]

I have a routed wifi in my Den.
It's not directly connected to my cerowrt.  
It's routed on a wired network that the cerowrt.  

Is there a way in the UI for me to write a firewall rule to let
packets in/out of it?  If I could create a zone based upon just
the subnet, it would work, but it seems that I can only define
covered networks by defining an interface on that network.

Basically, I need to put:

iptables -I FORWARD -s 209.87.252.192/28 -d 0.0.0.0/0 -j ACCEPT
iptables -I FORWARD -d 209.87.252.192/28 -s 0.0.0.0/0 -j ACCEPT

and I've even put this into "Custom Rules", but it doesn't seem to take.

-- 
]       He who is tired of Weird Al is tired of life!           |  firewalls  [
]   Michael Richardson, Sandelman Software Works, Ottawa, ON    |net architect[
] mcr@sandelman.ottawa.on.ca http://www.sandelman.ottawa.on.ca/ |device driver[
   Kyoto Plus: watch the video <http://www.youtube.com/watch?v=kzx1ycLXQSE>
	               then sign the petition.