steveej/infra
1
0
Fork 0
Code Issues 2 Pull requests Projects Releases Packages Wiki Activity Actions

fwhosts: remove all addresses except lan

Browse source 
because the hosts answer packets directly to clients which do not expect
that to happen. the alternative would be to explicitly set up NAT,
however this solution is simpler.
the internal networks.
This commit is contained in:
steveej 2022-01-16 01:58:10 +01:00
parent 2e74a2172c
commit e4aeb9621d
2 changed files with 0 additions and 6 deletions
Download patch file Download diff file Expand all files Collapse all files

3
nix/os/devices/fwhost1/system.nix
View file

@ -44,15 +44,12 @@ in {
networking.vlans.dmz.id = 5;
networking.vlans.dmz.interface = "breth";
networking.interfaces.dmz.ipv4.addresses = [{ address = "172.172.175.15"; prefixLength = 24; } ];
networking.vlans.family.id = 6;
networking.vlans.family.interface = "breth";
networking.interfaces.family.ipv4.addresses = [{ address = "172.172.176.15"; prefixLength = 24; } ];
networking.vlans.guests.id = 7;
networking.vlans.guests.interface = "breth";
networking.interfaces.guests.ipv4.addresses = [{ address = "172.172.177.15"; prefixLength = 24; } ];
services.hostapd = {
enable = false;

3
nix/os/devices/fwhost2/system.nix
View file

@ -45,15 +45,12 @@ in {
networking.vlans.dmz.id = 5;
networking.vlans.dmz.interface = "breth";
networking.interfaces.dmz.ipv4.addresses = [{ address = "172.172.175.16"; prefixLength = 24; } ];
networking.vlans.family.id = 6;
networking.vlans.family.interface = "breth";
networking.interfaces.family.ipv4.addresses = [{ address = "172.172.176.16"; prefixLength = 24; } ];
networking.vlans.guests.id = 7;
networking.vlans.guests.interface = "breth";
networking.interfaces.guests.ipv4.addresses = [{ address = "172.172.177.16"; prefixLength = 24; } ];
services.hostapd = {
enable = false;