Unfortunately node1 cannot be the AP cos is too far away from node3. So far I have a solution that seems working fine:
iptables -A FORWARD -i wlan0 -o eth0 -j ACCEPT iptables -A FORWARD -i eth0 -o wlan0 -j ACCEPT iptables -A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT iptables -A OUTPUT -m state --state ESTABLISHED,RELATED -j ACCEPT Every node successfully ping google (amen) and all packets are successfully forwarded to the node1 but, for some reason, every node fails fetching http://ftp.hk.debian.org... Could it be related to rules that I've configured? Moreover, I found another common rule that could help me but I'm not good enough to understand how to modify it for my specific case: iptables -t nat -A POSTROUTING -o eth0 -j MASQUERADE In my case, there is no ppp connection and IP are static. I think i should use the snat target but I cannot exactly understand what the rule will imply. May I have your advise? Thanks Davide On 9 Sep 2011, at 16:44, Sebastian Robitzsch wrote: > the answer is NAT on node1 including the corresponding routes set up on > node 1 between eth0 and wlan0/ath0. However, I recommend using node 1 as > the AP because otherwise you need to make sure that all the traffic goes > directly to the client (node 1) instead of getting routed through the AP > (node 2). > > An easy to follow howto for NAT can be found here: > http://seronline.de/?p=53 > > > Cheers, > Sebastian > > On Fri, 2011-09-09 at 14:26 +0100, [email protected] wrote: >> Hi, >> >> I have a WLAN network of three devices {node1, node2, node3}, static IP are >> 192.168.2.1, 192.168.2.2, 192.168.2.3. >> >> The access point is node2 so node1 and node3 are stations for node2. >> >> Node1 is the only one that has access to internet by eth0. eth0 at node1 has >> a static ip. >> >> Node2 and node3 can connect to node1. >> Node 1 can connect to internet. >> Node2 and node3 can NOT connect to internet. >> How should I configure node2 and node3 in order to reach internet? >> >> >> Many thanks >> >> >> Davide >> _______________________________________________ >> Voyage-linux mailing list >> [email protected] >> http://list.voyage.hk/mailman/listinfo/voyage-linux > > -- > Sebastian Robitzsch > PhD Candidate > University College Dublin > School of Computer Science & Informatics > Belfield > Dublin 4 > Ireland > > Mobile: +353 (0)86 - 22 10 988 > Mail: [email protected] > WWW: www.seronline.de > > Skype: seronline82 > Google/Jabber: [email protected] > > Mendeley: www.mendeley.com/profiles/sebastian-robitzsch > Twitter: www.twitter.com/seronline > Identi.ca: www.identi.ca/seronline > ----------------------------------------------------- > > > > _______________________________________________ > Voyage-linux mailing list > [email protected] > http://list.voyage.hk/mailman/listinfo/voyage-linux _______________________________________________ Voyage-linux mailing list [email protected] http://list.voyage.hk/mailman/listinfo/voyage-linux
