Config Two completely separate home networks with one shared internet connection

[Mks]

Have also a look on francos post from here to understand how opnsense handels packets https://forum.opnsense.org/index.php?topic=6587.msg30876#msg30876

[Jjabba]

You should read the rule like this:

(MYLAN) Interface
IPv4 *   MYLAN net   *   *   *   *   *   Default allow LAN to any
Every IPv4 packet which arrives (incoming) at “MYLAN Interface” is checked if
-IP is within the MYLAN range,
-Port *
-Destination *

if everything matches the paket is allowed.

Ok?

That is simple enough,
but what I really want to know is how I should read this rule:
Firewall rules for NEIGHBORLAN

Protocol	Source	Port	Destination	Port	Gateway	Schedule	Description
IPv4+6 *	*	*	MYLAN net	*	*	*	Block all traffic to MYLAN

Applying your formula I would think it reads something like:
> Every IPv4 and IPv6 packet leaving NEIGHBOUR LAN (outgoing)
is checked if
-IP is *
-Port *
-Destination within "MYLAN"
Block it.

But apparently that is not the reality, so how do I read this rule and what is the effect of it?

Also, if only incoming traffic is effected, why does the interface even allow me to add this rule in the first place?!

[Mks]

Hi.

You need to differenciate between you NEIGHBOR_LAN Range and the neighbor Interface.

Neigbhor Lan IP-Range is 192.168.100.0/24

Your rule :

Every packte which enters (incoming the Neighbour LAN Interface) the Neigbour LAN Interface Blocks Traffics if IPv4 or IPv6 and Destination IP is within 192.168.1.0/24 Range.

Br