/* HINT: Search archives @ http://www.indyramp.com/masq/ before posting! */


On Thu, 18 Nov 1999, John Hopkins wrote:

> Apparently, the solution is not as simple as having multiple
> "/sbin/ipchains -A forward..." commands in the
> /etc/rc.d/rc.firewall file, as it only works for one even if
> multiple are there.

Actually, you only need *one* line:

  masquerade 192.168.0.0/16 to the Internet.

> What I'm trying to do here may be a little bit complicated, but I
> have to believe that it IS possible for me to do this with a
> single well-configured RedHat 6.0 box.  Many thanks in advance for
> any advice.

It's not complicated at all. You don't even need to worry about the
subnetting at the masq box, just treat it as a pseudo-class-B network
at 192.168.*.*

The think to remember is routing. You'll probably want to set up some
static routes for the various subnets pointing at the various routers,
so that the return traffic knows where to go.

Does this help?

--
 John Hardin KA7OHZ   ICQ#15735746   http://www.wolfenet.com/~jhardin/
 [EMAIL PROTECTED]      pgpk -a finger://gonzo.wolfenet.com/jhardin
  768: 0x41EA94F5 - A3 0C 5B C2 EF 0D 2C E5  E9 BF C8 33 A7 A9 CE 76 
 1024: 0xB8732E79 - 2D8C 34F4 6411 F507 136C  AF76 D822 E6E6 B873 2E79
-----------------------------------------------------------------------
  Failure to plan ahead on someone else's part does not constitute an
  emergency on my part.
                                  - David W. Barts in a.s.r
                                    <[EMAIL PROTECTED]>
-----------------------------------------------------------------------
   44 days until the Y2K apocalypse - keep gold & ammo handy!

_______________________________________________
Masq maillist  -  [EMAIL PROTECTED]
Admin requests can be handled at http://www.indyramp.com/masq-list/ -- THIS INCLUDES 
UNSUBSCRIBING!
or email to [EMAIL PROTECTED]

PLEASE read the HOWTO and search the archives before posting.
You can start your search at http://www.indyramp.com/masq/
Please keep general linux/unix/pc/internet questions off the list.

Reply via email to