2009/10/7 Kostas Pelechrinis <kpele_ntua@xxxxxxxxx>: > Hi all, > > I am new in using iptables so I would like to do a few questions for something that maybe many of you find easy :) > > In particular, I have a laptop with two wireless interfaces, a Wifi and a 3G. I would like to share the 3G broadband connection available on this laptop with other machines within my home/internal network through the wifi interface. I would like to ask if such functionality is possible to be implemented using iptables. > > Even more specific what I need is a 'relay'-like functionality. Let's assume that laptop A has the two interfaces and laptop B has only a wifi interface. Laptop-B will be connected with laptop A through the wifi and laptop A needs to serve all the internet requests of laptop B through the 3G usb modem interface. > > I think that I need to use rules like the following for laptop A : > > (I use the names wifi0 and 3g0 for the corresponding interfaces and xxx.yyy.zzz.www for the ip of the 3G interface) > iptables -A FORWARD -i wifi0 -o 3g0 -j ACCEPT > iptables -A FORWARD -i 3g0 -o wifi0 -m state --state ESTABLISHED,RELATED -j ACCEPT > iptables -A POSTROUTING -t nat -s 192.168.0.0/24 -o eth0 -j SNAT --to-source xxx.yyy.zzz.www > > Do I miss something here ? Do I need to take care of something else as well? Check that forwarding is turned on in the kernel... sysctl net.ipv4.ip_forward should return net.ipv4.ip_forward=1, if it doesn't execute 'sysctl -w net.ipv4.ip_forward=1' to enable it. Not sure on the NAT rules as I have very little to do with NAT as we're using iptables on a private internal network where the address space in the private ranges is more than adequate enough (using all 3 classes of private addresses) -- Richard Horton Users are like a virus: Each causing a thousand tiny crises until the host finally dies. http://www.solstans.co.uk - Solstans Japanese Bobtails and Norwegian Forest Cats http://www.pbase.com/arimus - My online photogallery -- To unsubscribe from this list: send the line "unsubscribe netfilter" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
