* [Cerowrt-devel] Bug in Toronto release @ 2014-08-31 14:04 Joel Wirāmu Pauling 2014-08-31 15:33 ` Dave Taht 0 siblings, 1 reply; 2+ messages in thread From: Joel Wirāmu Pauling @ 2014-08-31 14:04 UTC (permalink / raw) To: cerowrt-devel Hi all, I just spent an hour scratching my head. I have a fairly easy setup, a vpn a 6in4 tun devices and seperated networks for 2.4 5 and wired networks. I just flashed the toronto released. And everything seemed to be working, but I kept getting connection refused for non http(s) and DNS . After poking iptables with explicit rules etc. I released that for some reason the SE00 and GW01 devices etc are not in the LAN firewall zone by default. Having no zone means certain white-listed things in the WAN firewall zone were allowed through (useful services). Someone might want to patch the configs so others don't encounter the same config bug. -Joel @aenertia http://gplus.to/aenertia ^ permalink raw reply [flat|nested] 2+ messages in thread
* Re: [Cerowrt-devel] Bug in Toronto release 2014-08-31 14:04 [Cerowrt-devel] Bug in Toronto release Joel Wirāmu Pauling @ 2014-08-31 15:33 ` Dave Taht 0 siblings, 0 replies; 2+ messages in thread From: Dave Taht @ 2014-08-31 15:33 UTC (permalink / raw) To: Joel Wirāmu Pauling; +Cc: cerowrt-devel [-- Attachment #1: Type: text/plain, Size: 1052 bytes --] It doesn't show in the gui but we use a pattern match to put stuff in zones. Gw+ matches all the guest wireless interfaces and lives in the guest zone with limited access to the other zones. Hi all, I just spent an hour scratching my head. I have a fairly easy setup, a vpn a 6in4 tun devices and seperated networks for 2.4 5 and wired networks. I just flashed the toronto released. And everything seemed to be working, but I kept getting connection refused for non http(s) and DNS . After poking iptables with explicit rules etc. I released that for some reason the SE00 and GW01 devices etc are not in the LAN firewall zone by default. Having no zone means certain white-listed things in the WAN firewall zone were allowed through (useful services). Someone might want to patch the configs so others don't encounter the same config bug. -Joel @aenertia http://gplus.to/aenertia _______________________________________________ Cerowrt-devel mailing list Cerowrt-devel@lists.bufferbloat.net https://lists.bufferbloat.net/listinfo/cerowrt-devel [-- Attachment #2: Type: text/html, Size: 1522 bytes --] ^ permalink raw reply [flat|nested] 2+ messages in thread
end of thread, other threads:[~2014-08-31 15:33 UTC | newest] Thread overview: 2+ messages (download: mbox.gz / follow: Atom feed) -- links below jump to the message on this page -- 2014-08-31 14:04 [Cerowrt-devel] Bug in Toronto release Joel Wirāmu Pauling 2014-08-31 15:33 ` Dave Taht
This is a public inbox, see mirroring instructions for how to clone and mirror all data and code used for this inbox