You need to add a more specific route for 192.168.0.0/20 pointing to 192.168.48.1
The easy way would be to put this on the smoothwall. I have no experience with
smoothwall but you should be able to add additional static routes
unless the have gutted the routing functionality of the original OS.
Normally a router will look for the best match so if the more specific route matches
it will use it, if not it will go to the default. If smoothwall won't allow this you
still have 2 options, add another interface to the smoothwall (if possible)
and hang 192.168.0.0/20 off that interface or configure all the hosts
on 192.168.48.0/20 with the static route for 192.168.0.0/20 to point to
192.168.48.1.
I hope this helps...I have a little iptables experience but a lot of routing experience.
Sorry if the formatting of this email is funky. I am using earthlink's webmail. It will probably bounce for the mailing list since it won't be coming from my domain address.
-PaulK
-------Original Message-------
From: Support <support@xxxxxxxxxxxxxxxxx>
Sent: 07/22/03 09:12 AM
To: iptables <netfilter@xxxxxxxxxxxxxxxxxxx>
Subject: setting up NAT to a internal network. {Scanned}
>
> Hello All, I'm new to iptables so go easy on me.
I'm using Smoothwall OS as my router / firewall. I have two internal
networks. I need the first network to have access to the second network
that is NATed to the first network. The first network has default route
to the Smoothwall router. Is there anyway to tell iptables that if the
destination is the second network to NAT or direct the packet the
internal router (192.168.48.1)?
ISP
|
XXX.XXX.XXX.XXX DHCP eth1
Smoothwall Router / Firewall
192.168.48.98/20 eth0
|
|
_______________________________________
|First Network |Second Network
| |
192.168.48.0/20 192.168.48.1/20
Workstations Internal Router
GW 192.168.48.98 192.168.0.0/20
PS I also posted this on Smoothwalls list and was told they can't help.
Please help!!
Thanks, David
--
This message has been scanned for viruses and
dangerous content by www.Computer-Medic.us, and is
believed to be clean.
support@xxxxxxxxxxxxxxxxx
>
