Excuse me if this is a dumb question, I somehow manage not to know the answer.
Do the firewalling rule apply to the destination address or destination interface ?
To clarify: If I have one (or more) internal subnets (known to Astaro as static routes), do I have to define packet filter rules for these subnets as well or will the rules from the interface that will route them apply ?
To give an exemple:
Internal network: 10.0.0.0/24
Internal network card: 10.0.0.1
Additional network 10.0.1.0/24
route for above net: 10.0.1.0/24 -> 10.0.0.254
(there is a router on 10.0.0.254 that has 10.0.1.0/24 as llocal on one of it's interfaces)
If I want, for instance, to allow port 80 access from 10.0.1.32, do I have to add a packet filter exception to:
10.0.0.0/24 ?
10.0.0.254/32 ?
10.0.1.0/24 ?
All of them ?
none of them (then what) ?
TIA
This thread was automatically locked due to age.
