local.m4: Untrusted source addresses appear on the backbone.

[firewall] / local.m4

diff --git a/local.m4 b/local.m4
index 71c146f..f0e093d 100644 (file)
--- a/local.m4
+++ b/local.m4
@@ -72,8 +72,8 @@ defnet housebdry virtual
 ## House hosts.
 defhost radius
        hosttype router
-       iface eth0 dmz unsafe safe default
-       iface eth1 dmz unsafe safe default
+       iface eth0 dmz unsafe safe untrusted default
+       iface eth1 dmz unsafe safe untrusted default
        iface eth2 safe
        iface eth3 untrusted default
        iface t6-he default
@@ -90,8 +90,8 @@ defhost artist
        iface eth3 untrusted
 defhost vampire
        hosttype router
-       iface eth0.0 dmz unsafe safe
-       iface eth0.1 dmz unsafe safe
+       iface eth0.0 dmz unsafe untrusted safe
+       iface eth0.1 dmz unsafe untrusted safe
        iface eth0.2 safe
        iface eth0.3 untrusted
        iface dns0 iodine