Hello, I have never used a wireless interface yet but as long as you have ip_forwarding enabled it should forward the packets across the interfaces, the clients must be setup to route packets to the wireless interface either by a default route or a routing table entry. If you want the packets to be MASQUERADE that should be as simple as adding a rule for packets leaving the interface. Michael. On Wed, 18 Aug 2004 13:48:18 +0200 Steve Comfort <steve@xxxxxxxxx> wrote: > Hi all, > > I'm working on an embedded scenario that has got me a bit stumped, and > thought maybe one of the guru's here could help out. > > The device is based around an IXP processor and has an ethernet and a > wireless interface. When the wireless interface is configured as managed > (ie its a client) I have no problem and am happily using a modification > of Oskar Andreaason's firewall script to do the firewalling. Everything > works fine. > > However, what should I be doing if the device is configured as an Access > Point? I figured I need to allow in NEW TCP connections, but don't know > whether I will be able to use iptables to masquerading between the wlan > port and the eth port, (ie will the MASQUERADE target forward packets > received on the WLAN to the ETH interface ?) or whether I will have to > add a bridge and use ebtables? > > Any advice would be appreciated! > > Best regards > Steve > > > > > > -- Michael Gale Network Administrator Utilitran Corporation