Re: [LUG] routing - cutting off a zone

[Daniel Robinson <manipula@xxxxxxxxx>]

Why not write in your software firewall a rule to deny any packets from that local ip pool.
Repeat for each device you want to protect.

On 26/08/15 19:51, mr meowski wrote:

On 26/08/15 18:57, Tom wrote:

I've managed to get a RaspberryPi to act as a hotspot for my holiday
cottage guests to connect to the internet.
My adsl router is 192.168.2.254 and the guests work from 192.168.10... .
I want to prevent them accessing the 192.168.2 network other than the
router - how can I get this to just sink anthng other than the nat
traffic ...
Tom te tom te tom

VLANs.

Does your router support them? Or potentially check "traffic isolation"
in your SSID settings, but that doesn't work as well as you think it
might (unless your guests are evil hackers, still probably not worth
bothering about it to be honest). Does your router support separate SSIDs?

There are a million ways to do this to be honest.

My router doesnt - its just a BT jobbie. I was hoping to just drop
anything from the holiday guests aimed at my network from 'their' wlan.
Just to clarify I have a BT router connected to the internet doing wifi.
A pi with 2 usb wifi cards a lot nearer our holiday cottages connected to the router on wlan0 (static ip ) and wlan1 doing isc-dhcp-server and hostapd which seems to connect ok and route to the router fine: tested it on a couple of machines and it seem as fast as the ADSL!
My brain has been washed out by the weather though!
Tom te tom te tom



--
The Mailing List for the Devon & Cornwall LUG
http://mailman.dclug.org.uk/listinfo/list
FAQ: http://www.dcglug.org.uk/listfaq

-- 
The Mailing List for the Devon & Cornwall LUG
http://mailman.dclug.org.uk/listinfo/list
FAQ: http://www.dcglug.org.uk/listfaq