Static route & Firewall rules (FW-G)

Follow

Jammac

• January 13, 2021 10:24

All,

I've an old WPS printer which I have to connect to my network (WPS is now turned off on the router). This printer connects to my .10 network which is effectively my IoT network.

I've then used static routing to advertise the printer onto my .5 network, which is effectively my Personal Devices (Laptops/phones etc).

Everything works and I have no issues.

My question is around how the rules I've used to protect my network are working and what is going on under the hood. Do the rules still apply even with static routing and so on. Generally a little more information and/or confirmation that my config is protecting my printer, and protecting me, from my printer. 

 

Network rule below:

1. .BLOCK - traffic from & to All Local Networks ON .10 network (IoT). 

Device rules below:

2. ALLOW - .5.1/24 network (Personal Devices) ON Printer.

3. BLOCK - traffic from and to .10 network (IoT) ON Printer.

4. BLOCK - traffic from and to Internet ON Printer.

 

Thanks in advance.

0

• 

  Firewalla

  • January 13, 2021 17:34

  Under the hood is pretty much all linux iptables/ipset/and a bunch of other stuff ... :). But in general, your configuration is good.  

  0

  Comment actions Permalink

Please sign in to leave a comment.