Agiofws :i need to ask a simple Q on NAT & statci routing i have drawn the topology to make things simpler which you can find in http://img417.imageshack.us/my.php?image=mylanblack9zq.jpg
Agiofws: my question is that for 2.x to receive INET do i have to enable NAT on 1.1 AND make a static ROUTE to 2.X from router 1.1 or is the second action not necassary ?
danieldg : the second action is necessary unless you want 2.4 to also do NAT (which should be avoided if possible)
Agiofws do i also need to do the same static route on 1.2 to to see 2.x subnet ?
danieldg depends on what you mean by "only NAT". NAT is just address translation... routing is different
danieldg no, 1.2 will send packets to 1.1, which will send them to 2.x
danieldg you _could_ add the route, if you wanted it a bit faster
danieldg but it's not needed
Agiofws but if i do the same static route on 1.2 to to see 2.x it won't send them to 1.1 right
Agiofws ok.. thaks again most gratfull
Agiofws and a 3rd question
Agiofws if i set up a webserver on 2.3 say do i do packet forwarding on 1.1 ? and how would i issue it in linux ?
Agiofws with the route command ?
Agiofws with iptables ?
danieldg iptables
danieldg after the routes have been added, add a DNAT rule to the firewall
Agiofws is via in the command ?
danieldg yes
Agiofws eth1 is 1.10 right ? no its the eth1 card of 1.1 ?
danieldg eth1 is the interface 1.1 is on
Agiofws if i have everything to accept will i need to issue an iptables rule ?
danieldg for the server, yes
danieldg but not simply for this route
Agiofws ?
danieldg no
say like ports 80 yes ?
danieldg input & output are used only for the local machine
Agiofws on 1.1 ?
danieldg yes
Agiofws if on 1.1 if everything was on drop policy i would have to issue an iptable rule to open inbound outbound traffic on port 80
Agiofws something like that right ?