Re: WAN blocked and should not be

Lee Sharp <[email protected]> Mon, 22 Feb 2010 12:18:43 -0600

Newsgroups	gmane.comp.security.firewalls.m0n0wall
Message-ID	<[email protected]>

Andrew Tillman wrote:
> NAT is turned off.
> 
> Both IPs are on the same subnet because of the existing internal 
> network. If I just unhook the WAN will captive portal still work if 
> monowall is plugged into the switch?

That is the point.  The CP works through the routed interface.  You need 
routing.  So you need a second subnet, and a static route on your 
hardware firewall to the internal subnet with a next hop of the WAN 
interface.

			Lee