Building network

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Hi all.
I have just switched to a new DSL provider and I need some serious help
re-building my iptables/routing setup for the new connection.
The ISP now provides me with a /29 subnet that I want to use for some of
the computers on my LAN.

The access device, a DSL bridge, is attached to the debian routing box
(currently with 2 interfaces). According to the ISP tech department (they
are referring to a standard soho router) I have to set the internal (LAN)
interface to xxx.xxx.xxx.153 and the outside interface (WAN) will get the
IP assigned by their DHCP. I then have 5 more IPs that I want to assign to
different computers (static addressing - no internal DHCP needed).

Since I want to host various servers, all of the computers that get public
IPs will have to be accessible on whatever service they're hosting. In the
case of the mailserver, the outgoing IP has to be the real one (and not
the routing box's) because of rdns and dnsbl issues.
Basically I think I do not need NAT. Unfortunately I have no idea how to
implement that..

Next: there's a bunch of wifi clients that connect to an internal AP. To
be on the safe side I decided to keep the AP in a local LAN (10.0.1.0/24)
and have the debian box to do NAT for them.
My idea would be to add a third network interface to the routing box and
give it a local LAN address, then use a basic iptables setup to have it
NAT for any local client that requests it.

If someone has had some experience with this I would really appreciate
some guidence with what I'm trying to set-up.
Regards,

-JK



--
To unsubscribe from this list: send the line "unsubscribe netfilter" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at  http://vger.kernel.org/majordomo-info.html

[Index of Archives]     [Linux Netfilter Development]     [Linux Kernel Networking Development]     [Netem]     [Berkeley Packet Filter]     [Linux Kernel Development]     [Advanced Routing & Traffice Control]     [Bugtraq]

  Powered by Linux