chiark / gitweb /
local.m4: artist should expect untrusted source addrs on dmz and unsafe.
authorMark Wooding <mdw@distorted.org.uk>
Wed, 12 Sep 2012 08:51:59 +0000 (09:51 +0100)
committerMark Wooding <mdw@distorted.org.uk>
Wed, 12 Sep 2012 08:51:59 +0000 (09:51 +0100)
An untrusted device, not on the VPN, will be routed to artist through
radius.

local.m4

index e083a6460ed379a6dc90c94fbaf5a9d032cf1ee7..324265c4775ba07dc2e4530142e5be2e6623b724 100644 (file)
--- a/local.m4
+++ b/local.m4
@@ -88,8 +88,8 @@ defhost jem
        iface eth1 dmz unsafe
 defhost artist
        hosttype router
-       iface eth0 dmz unsafe
-       iface eth1 dmz unsafe
+       iface eth0 dmz unsafe untrusted
+       iface eth1 dmz unsafe untrusted
        iface eth3 untrusted
 defhost vampire
        hosttype router