From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mail2.tohojo.dk (mail2.tohojo.dk [IPv6:2a01:4f8:200:3141::101]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (Client did not present a certificate) by huchra.bufferbloat.net (Postfix) with ESMTPS id 2E07321F24B for ; Fri, 21 Mar 2014 15:53:11 -0700 (PDT) X-Virus-Scanned: amavisd-new at example.com Received: by alrua-x1.borgediget.toke.dk (Postfix, from userid 1000) id CBA811BD0C; Fri, 21 Mar 2014 23:53:02 +0100 (CET) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=toke.dk; s=201310; t=1395442383; bh=V4/7J1KfdM9viLh3TU3+cl8hyr1g8NuDWdgmTJMVs18=; h=From:To:Cc:Subject:References:Date:In-Reply-To; b=G2oGejap7CoR70FSrrELJC/RQbQBghrFq64di2VL70icyfVqmm81SBL8ADZprFZfk xtdl9Fa5KfhmM0W7MJBHbKaEqnsjIBlNCXBNjZKS0CLYYsvqsBCYQrBGSnv1Zf8pAU +rC4Q5cdUp4HX3UCzGMbo9zFHUUhz4DfkHVaiWK0= From: =?utf-8?Q?Toke_H=C3=B8iland-J=C3=B8rgensen?= To: Sebastian Moeller References: <3F98D180-3AF8-4AFA-80B4-A13E55CAA03A@gmx.de> Date: Fri, 21 Mar 2014 23:53:00 +0100 In-Reply-To: <3F98D180-3AF8-4AFA-80B4-A13E55CAA03A@gmx.de> (Sebastian Moeller's message of "Fri, 21 Mar 2014 23:00:00 +0100") Message-ID: <87mwgjtb8z.fsf@alrua-x1.karlstad.toke.dk> Content-Type: multipart/signed; boundary="=-=-="; micalg=pgp-sha256; protocol="application/pgp-signature" Cc: "cerowrt-devel@lists.bufferbloat.net" Subject: Re: [Cerowrt-devel] cerowrt-3.10.32-12 released X-BeenThere: cerowrt-devel@lists.bufferbloat.net X-Mailman-Version: 2.1.13 Precedence: list List-Id: Development issues regarding the cerowrt test router project List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 21 Mar 2014 22:53:11 -0000 --=-=-= Content-Type: text/plain Sebastian Moeller writes: > I did not notice this even though my primary router furnishes > cerowrt with 192.168.2.104 (but no additional subnets in there), the > internet works and I can reach machines in the primary subnet just > fine, so nothing to see here ;) Greart work Dave and Toke. Yay! Just to confirm: 1. What is the output of `ipset list` on the router? 2. What happens if you ping 192.168.1.1 (or some other address in a private subnet, but not configured on any of your interfaces)? > I guess having an easy way to set exceptions is really a good > solution. There's a BCP38 tab in the firewall config that allows you to input subnet exceptions manually if needed. :) -Toke --=-=-= Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.22 (GNU/Linux) iQEcBAEBCAAGBQJTLMLMAAoJEENeEGz1+utP/agIAKacD14yJpUmxIqnvzfysnNq pgYiAUWaP5v31bKpStjjKiMxe4qHJ5HtonH/In1r9a3/7X93CrCj3XGV8Ea5r6Oq Q36UnIqRFycmP222anHELJkH38HtMVSkL0shx7AHS3mdMrhGqHRt22JdI6hLkLfu JqQQcS+z104flvCHE/9seq6XCfUmCvHVCmt3xnQGKEW/KOiK1THzNcKKjfNydNGv OcvZMmITFqmuCiz+gBusI92PN9ACWwRxNIaUx+bHuApmnvT/SumEApQkUFJihUCf kmMRT6P9mks4NcUsRSCKTMYurYQ3Yb6/4GzPNlbXgQmdbDmyuU1WjIZ8BKe0GqI= =RUmg -----END PGP SIGNATURE----- --=-=-=--