Messages

Same, widget failed to load.

Thanks to everyone for the explanation.  :)

Yes, I understand, that "default" behavor is deny all. I just need clarification, where to put rules to allow access.
cookiemonster said on VLAN30, you on VLAN10, that's my point. Which method is the correct one?

Hi,

I need a clarification about rules applied to interfaces. On my OPNSENSE box i have a many vlan networks.
Let's say there are VLAN10 (10.0.10.0/24) - internal desktops, VLAN20 (10.0.20.0/24) - printers and VLAN30 (10.0.30.0/24) - internal servers. I would like the internal servers to be accessed only from VLAN10. Where should I put rules to protect access to servers, on VLAN10 or VLAN30 interface?
e.g.
on interface VLAN10:

Code Select Expand


1)
action: pass
proto: IPv4
source: *
destination: SRV01 (10.0.30.2)
port: 80
2)
action: pass
proto: IPv4
source: *
destination: SRV02 (10.0.30.3)
port: 22


etc.

OR

on interface VLAN30:

Code Select Expand


1)
action: pass
proto: IPv4
source: VLAN10 net (10.0.10.0/24)
destination: SRV01 (10.0.30.2)
port: 80
2)
action: pass
proto: IPv4
source: VLAN10 net (10.0.10.0/24)
destination: SRV02 (10.0.30.3)
port: 22