/* HINT: Search archives @ http://www.indyramp.com/masq/ before posting!
/* ALSO: Don't quote this header. It makes you look lame :-) */
Continuing on.. see below:
>So you are looking for something like this? Sorry if this
>seems drawn out but getting all the info FIRST will greatly
>help.
>
>
>public IP #1: 172.16.0.1
>public IP #1: 172.16.0.2
>public IP #1: 172.16.0.3
>
>Groupings (6 IPs per subnet):
>
>+- MASQ server IP #1: 192.168.0.1
>+- MASQ IP #1: 192.168.0.2
>
>+- MASQ server IP #2 192.168.0.9
>+- MASQ IP #2: 192.168.0.10
>+- MASQ IP #3: 192.168.0.11
>
>+- MASQ server IP #2 192.168.0.17
>+- MASQ IP #4: 192.168.0.18
>
> +-----------+
>I ---- |Linux Box |
> \ DSL line / ppp0 /+-----+
>S -----================== ppp1 eth1 -+---+ |
> / (3) PPPoE \ ppp2 \+-+ | |
>P ---- connections +-----------+ | | |
> | | |
> +---------------------------+ | |
> | | |
> eth1 | |
> MASQ Server #1 | |
> MASQ IP #1 | |
> | |
> +-----------------------------+ |
> | |
> eth1:1 |
> MASQ Server #2 |
> MASQ IP #2 |
> MASQ IP #3 |
> |
> +-------------------------------+
> |
> eth1:2
> MASQ Server #3
> MASQ IP #4
All you need (absolute MINIMUM - forwarding between internal
networks NOT permitted) to get things working is:
ifconfig eth1 192.168.0.1 netmask 255.255.255.248
route add default gw 172.16.0.1
ifconfig eth1:1 192.168.0.9 netmask 255.255.255.248
ifconfig eth1:2 192.168.0.17 netmask 255.255.255.248
echo "1" > /proc/sys/net/ipv4/ip_forward
/sbin/ipchains -P input ACCEPT
/sbin/ipchains -P output ACCEPT
/sbin/ipchains -P forward DENY
/sbin/ipchains -A forward -i ppp0 -s 192.168.0.0/29 -j MASQ
/sbin/ipchains -A forward -i ppp1 -s 192.168.0.8/29 -j MASQ
/sbin/ipchains -A forward -i ppp2 -s 192.168.0.16/29 -j MASQ
Don't forget to set each of the default gateway setttings on
each of the internal MASQed PCs to their appropreate MASQ
server grouping's IP address. Also don't forget all the
info like DNS, etc per the normal MASQ setup.
--David
.----------------------------------------------------------------------------.
| David A. Ranch - Linux/Networking/PC hardware [EMAIL PROTECTED] |
!---- ----!
`----- For more detailed info, see http://www.ecst.csuchico.edu/~dranch -----'
_______________________________________________
Masq maillist - [EMAIL PROTECTED]
Admin requests can be handled at http://www.indyramp.com/masq-list/ --
THIS INCLUDES UNSUBSCRIBING!
or email to [EMAIL PROTECTED]
PLEASE read the HOWTO and search the archives before posting.
You can start your search at http://www.indyramp.com/masq/
Please keep general linux/unix/pc/internet questions off the list.
