then, I made a firewall rule for these IPs
Code: Select all
add action=drop chain=forward comment="No Outside Access" dst-address=!192.168.0.0/16 src-address=192.168.110.128/28
add action=drop chain=forward comment="No Outside Access" dst-address=!192.168.0.0/16 src-address=192.168.110.128/28
In theory yes. I'd be interested to see somebody verify that. And to verify that they still function properly if connected from within same LAN segment.Without gateway they will not going outside.
Yea I was thinking they may not pull a DHCP address without a gateway, I plugged in an 'Anpvis' IP camera where that seemed to be the case..In theory yes. I'd be interested to see somebody verify that. And to verify that they still function properly if connected from within same LAN segment.Without gateway they will not going outside.
The worst part was how long I didn't have this rule even though I know I should have..Sounds like something I'd really love to have in my network. Maybe in VLAN, completely isolated from everything else.