diff --git a/Shorewall-docs2/OPENVPN.xml b/Shorewall-docs2/OPENVPN.xml index 3b993fa5f..e7de1324d 100644 --- a/Shorewall-docs2/OPENVPN.xml +++ b/Shorewall-docs2/OPENVPN.xml @@ -11,7 +11,7 @@ Simon - Mater + Matter @@ -597,7 +597,7 @@ openvpnserver:1194 Wifi 192.168.3.0/24 #ZONE TYPE OPTIONS IN OUT # OPTIONS OPTIONS -home ipv4 #Wired LAN at our home +lan ipv4 #Wired LAN at our home net ipv4 #LAST LINE - ADD YOUR ENTRIES ABOVE THIS ONE - DO NOT REMOVE @@ -609,7 +609,7 @@ net ipv4 #ZONE INTERFACE BROADCAST OPTIONS # net eth0 detect routefilter,dhcp,tcpflags -home tap0 192.168.1.255 +lan tap0 192.168.1.255 #LAST LINE -- ADD YOUR ENTRIES BEFORE THIS ONE -- DO NOT REMOVE @@ -619,17 +619,17 @@ net eth0 detect routefilter,dhcp,tcpflags Since we don't expect any traffic between the net zone and the home zone, we use NONE policies for that + role="bold">lan zone, we use NONE policies for that traffic. If any such traffic should occur, it will be handled according to the all->all policy. #SOURCE DEST POLICY LOG LIMIT:BURST # LEVEL fw net ACCEPT -fw home ACCEPT -home fw ACCEPT -net home NONE -home net NONE +fw lan ACCEPT +lan fw ACCEPT +net lan NONE +lan net NONE net all DROP info # The FOLLOWING POLICY MUST BE LAST all all REJECT info