You cross-posted this into too many mailing lists. I saw it in linux-net, so that's where I am sending my reply to. On Thu Apr 12 2001 at 09:19, Lee Leahu wrote: > i have two network connections. > > one is to my company with the lan useing the 192.168.0.0 subnet, > and the other is to a client using the same subnet. > > i wanted to know if it was possible to setup some kind of nating on my laptop > in such a way, that will translate the client's entire 192.168.0.0 subnet > into a 10.168.0.0 subnet on by laptop. > > i printed the man pages for ipchains, but i'm not sure how and where > to start. > > if anyone can help, that would be appreciated. > > i'm runing SuSE 7.1 2.4.0-4GB kernel on my ibm 600E latop. If the network with your client's lan is on eth1 and the other lan on eth0, then do it like this: ipchains -I forward -i eth0 -j MASQ That will masquerade (nat) _everything_ being _forwarded_ to the eth0 interface as coming from that box (your laptop). If you don't want everything masqueraded, then make the rule more specific, like this: ipchains -I forward -i eth0 -j MASQ -s 192.168.200.0/24 which will only masquerade packets with a 192.168.200.0/24 source address. Easy, no? :-) Oh, 2.4.x kernel? Then "modprobe ipchains" before you do this. Or, alternatively, "modprobe ip_tables" and use similar rules with /sbin/iptables to achieve the same thing. Cheers Tony Network and Systems Administration, RHCE LinuxWorks for networking : tony@linuxworks.com.au Consultant, GrowZone OnLine : tony@growzone.com.au - : send the line "unsubscribe linux-net" in the body of a message to majordomo@vger.kernel.org