help on masquerading

2004-06-29 Thread Ritesh Raj Sarraf
Hello all, I have a masquerading server with 2 ethernet cards, eth0(202.52.x.x) to the internet and eth1(192.168.100.x) to my local network customers. I've enabled nat and my customers are able to browse the internet well (My customer are cyber cafe owners). I've limited their bandwidth. The

Re: help on masquerading

2004-06-29 Thread Hiren
how about limiting on MAC addresses :? On Tue, 29 Jun 2004, Ritesh Raj Sarraf wrote: Hello all, I have a masquerading server with 2 ethernet cards, eth0(202.52.x.x) to the internet and eth1(192.168.100.x) to my local network customers. I've enabled nat and my customers are able to browse

Re: help on masquerading

2004-06-29 Thread Ritesh Raj Sarraf
I think I've got a little confused. For example I hit the following: iptables -P FORWARD DROP iptables -A FORWARD -s xx:xx:xx:xx -o eth0 -j MASQUERADE xx would be the hardware address. Now wouldn't he be able to change the ip and still be connected because he still has the same hardware mac

Re: help on masquerading

2004-06-29 Thread John Hedges
On Tue, Jun 29, 2004 at 12:38:58PM +0545, Ritesh Raj Sarraf wrote: Hello all, I have a masquerading server with 2 ethernet cards, eth0(202.52.x.x) to the internet and eth1(192.168.100.x) to my local network customers. I've enabled nat and my customers are able to browse the internet well (My

Re: help on masquerading

2004-06-29 Thread Kevin de Kok
Hi Ritesh, Maybe subenetting is a solution for you so that you only have x ip's available for your network. Cheers, Kevin. John Hedges wrote: On Tue, Jun 29, 2004 at 12:38:58PM +0545, Ritesh Raj Sarraf wrote: Hello all, I have a masquerading server with 2 ethernet cards, eth0(202.52.x.x) to

Re: help on masquerading

2004-06-29 Thread Arnt Karlsen
On Tue, 29 Jun 2004 12:38:58 +0545 (NPT), Ritesh wrote in message [EMAIL PROTECTED]: Hello all, I have a masquerading server with 2 ethernet cards, eth0(202.52.x.x) to the internet and eth1(192.168.100.x) to my local network customers. I've enabled nat and my customers are able to browse the

help on masquerading

2004-06-29 Thread Ritesh Raj Sarraf
Hello all, I have a masquerading server with 2 ethernet cards, eth0(202.52.x.x) to the internet and eth1(192.168.100.x) to my local network customers. I've enabled nat and my customers are able to browse the internet well (My customer are cyber cafe owners). I've limited their bandwidth. The

Re: help on masquerading

2004-06-29 Thread Hiren
how about limiting on MAC addresses :? On Tue, 29 Jun 2004, Ritesh Raj Sarraf wrote: Hello all, I have a masquerading server with 2 ethernet cards, eth0(202.52.x.x) to the internet and eth1(192.168.100.x) to my local network customers. I've enabled nat and my customers are able to browse

Re: help on masquerading

2004-06-29 Thread Ritesh Raj Sarraf
I think I've got a little confused. For example I hit the following: iptables -P FORWARD DROP iptables -A FORWARD -s xx:xx:xx:xx -o eth0 -j MASQUERADE xx would be the hardware address. Now wouldn't he be able to change the ip and still be connected because he still has the same hardware mac

Re: help on masquerading

2004-06-29 Thread John Hedges
On Tue, Jun 29, 2004 at 12:38:58PM +0545, Ritesh Raj Sarraf wrote: Hello all, I have a masquerading server with 2 ethernet cards, eth0(202.52.x.x) to the internet and eth1(192.168.100.x) to my local network customers. I've enabled nat and my customers are able to browse the internet well (My

Re: help on masquerading

2004-06-29 Thread Kevin de Kok
Hi Ritesh, Maybe subenetting is a solution for you so that you only have x ip's available for your network. Cheers, Kevin. John Hedges wrote: On Tue, Jun 29, 2004 at 12:38:58PM +0545, Ritesh Raj Sarraf wrote: Hello all, I have a masquerading server with 2 ethernet cards, eth0(202.52.x.x) to

Re: help on masquerading

2004-06-29 Thread Arnt Karlsen
On Tue, 29 Jun 2004 12:38:58 +0545 (NPT), Ritesh wrote in message [EMAIL PROTECTED]: Hello all, I have a masquerading server with 2 ethernet cards, eth0(202.52.x.x) to the internet and eth1(192.168.100.x) to my local network customers. I've enabled nat and my customers are able to browse the