[MLB-WIRELESS] ot a bit

[Matthew Hill]

Tony and all.

Thanks for your advice, and response. I tried your method, however that cut all links outside.
echo "   FWD: Allow all connections OUT and only existing and related ones IN"
$IPTABLES -A FORWARD -i $EXTIF -o $INTIF -m state --state ESTABLISHED,RELATED -j ACCEPT
$IPTABLES -A FORWARD -i $INTIF -o $EXTIF -j ACCEPT

i read the file and duplicated the above two lines replacing $intif with eth2 [the wireless card]

my adsl modem is a dlink with bult in client set at 192.168.0.1 the nic its connected to is dhcp from the modem and changes to outside ip like a ppp link would work. i found it easyier for routing to have local lan nic as 192.168.1.1 and wireless as 192.168.2.1.

with the setup now its all working 100%

Thanks

  ----- Original Message ----- 
  From: Tony Langdon 
  To: 'Matthew Hill' ; melbwireless at wireless.org.au 
  Sent: Monday, November 18, 2002 2:57 PM
  Subject: RE: [MLB-WIRELESS] ot a bit


  echo " External Interface: $EXTIF"

  echo " Internal Interface: $INTIF"

  eth0 being the adsl link eth1 being the first internal net. i want to =
  add something like initif=3Deth2 as well to put masq onto both internal =
  nets ??? any ideas 

  You just need to ensure that the address range 192.168.2.0/24 is included in the range of source addresses for MASQ.  It's a pity you chode 192.168.1.x and 192.168.2.x, as these don't aggregare as well as 192.168.0.x and 192.168.1.x

  For the ranges you've got, duplicate the iptables line which ends in -j MASQ, and change the source address of the second one (-s 192.168.2.0/24).

  Hope that makes sense.  Don't have iptables in front of me atm...


  ---
  Outgoing mail has been scanned for Viruses
  Checked by AVG anti-virus system (http://www.grisoft.com).
  Version: 6.0.417 / Virus Database: 233 - Release Date: 8/11/2002




  This correspondence is for the named person's use only. It may contain confidential or legally privileged information or both. No confidentiality or privilege is waived or lost by any mistransmission. If you receive this correspondence in error, please immediately delete it from your system and notify the sender. You must not disclose, copy or rely on any part of this correspondence if you are not the intended recipient.



  Any opinions expressed in this message are those of the individual sender.



-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.wireless.org.au/pipermail/melbwireless/attachments/20021118/b87fbd6c/attachment.html>