Hello debian users. I am having the following ip masquerading issue: 1) I have four networks in my office
200.189.194.144 (netmask 255.255.255.248) - internet servers 10.0.0.x (netmask 255.255.255.0) - internal network 10.0.1.x (netmask 255.255.255.0) - other internal network 200.217.207.129 (netmask 255.255.255.255) - ADSL router I want a linux server (2.2 kernel) to route the packets and let everybody access the internet via the ADSL link. That's how I imagine the thing built: eth2) 10.0.1.x-------------------------------- | eth1) 200.189.194.144 ------------ | | | eth0) 10.0.0.x-------------- | | eth0:0) 200.207.217.129--- | | | | | ------------------------------------------- | NIC1 NIC2 NIC3 | | | | linux router | ------------------------------------------- so eth2 is 10.0.1.1, eth1 is 200.189.194.150 and eth0 has 10.0.0.1 and 200.207.217.129 ips (thanks to ip alising), so after this setup i connect the interfaces to the corresponding hubs (the network hubs are NOT interconnected), configure everything on /etc/network/interfaces and start ipmasquerading (debian ipmasq package) 200.207.217.129, the ADSL port, is the default gateway. >From a computer in the 10.0.0.x network I can ping the internet (via ADSL) and any computer on the 10.0.1.x network (vice versa for the computers on the 10.0.1.x net) BUT, i cannot access the servers connected to NIC2 (eth1) directly .... I need some special rule for that. Can anyone shed a light ? Thank you very much in advance gui