Recent content by miro

Thanks for all your help guys.

OK, I think I understand now. My ADSL modem is actually a router with modem, so I'm thinking about connecting the WAN port of Router B to ADSL router/modem. This way the red unsecured section has access only to the internet and whatever is allowed in NAT/firewall of the Router A. Same way Router...

I don't want my NAS to be part of the "red" unsecured zone, that's why I left it out and it will be connected to the switch instead of router. I guess I could create 2 VLANs in router B , one secure VLAN, another unsecure VLAN, but that's another topic. Main question is this: If I put router B...

Thank you for sharing your setup. I think I will actually use something similar. Could you please tell me if the following setup will work? 1/ I will put another router (router B) before this group of unsecured wired IoT devices. They are all wired, so let's skip the wifi setup for now, to make...

Yes, I'm already using isolated guest network for friends, but I'm worried than some hacker might hack my "non guest" wifi and gain access to the LAN. I guess it's better to have firewall on each device in LAN instead, but some devices don't have firewall/iptables such as my "dreambox"...

Hmm. Am I actually doing something wrong/non standard? I think that firewall functionality is one of the core functionalities of a router. Shouldn't this be provided out-of-the-box for a default "Wireless router" mode? Maybe the "Wireless router" mode shouldn't use a bridge to make it possible...

anyone?

Hi all, I'm trying to block (ssh) connections from one LAN IP: 192.168.2.6 to another LAN IP: 192.168.2.50 using iptables or ebtables, but so far no luck. Here's what I tried so far: ebtables -t broute -I BROUTING -p IPv4 --ip-proto tcp --ip-src 192.168 .2.6 --ip-dport 22 --ip-dst 192.168.2.50...