local.m4: Packets can be routed over the safe network.

diff --git a/local.m4 b/local.m4
index 410e523..9dfc464 100644 (file)
--- a/local.m4
+++ b/local.m4
@@ -74,7 +74,7 @@ defhost radius
        hosttype router
        iface eth0 dmz unsafe safe untrusted vpn sgo colobdry default
        iface eth1 dmz unsafe safe untrusted vpn sgo colobdry default
-       iface eth2 safe vpn
+       iface eth2 dmz unsafe safe untrusted vpn sgo colobdry
        iface eth3 untrusted vpn default
        iface t6-he default
        iface vpn-precision colobdry vpn sgo
@@ -95,7 +95,7 @@ defhost vampire
        hosttype router
        iface eth0.0 dmz unsafe untrusted safe vpn sgo colobdry
        iface eth0.1 dmz unsafe untrusted safe vpn sgo colobdry
-       iface eth0.2 safe
+       iface eth0.2 dmz unsafe safe untrusted vpn sgo colobdry
        iface eth0.3 untrusted
        iface dns0 iodine
        iface vpn-precision colobdry vpn sgo