local.m4: artist should expect untrusted source addrs on dmz and unsafe.
authorMark Wooding <mdw@distorted.org.uk>
Wed, 12 Sep 2012 08:51:59 +0000 (09:51 +0100)
committerMark Wooding <mdw@distorted.org.uk>
Wed, 12 Sep 2012 08:51:59 +0000 (09:51 +0100)
An untrusted device, not on the VPN, will be routed to artist through
radius.

local.m4

index e083a64..324265c 100644 (file)
--- a/local.m4
+++ b/local.m4
@@ -88,8 +88,8 @@ defhost jem
        iface eth1 dmz unsafe
 defhost artist
        hosttype router
-       iface eth0 dmz unsafe
-       iface eth1 dmz unsafe
+       iface eth0 dmz unsafe untrusted
+       iface eth1 dmz unsafe untrusted
        iface eth3 untrusted
 defhost vampire
        hosttype router