On Thu, Mar 22, 2001 at 01:19:06PM +0100, Mateusz Mazur wrote: > Hello. > I will be very, very greatfull for your help. I'am newbie and I have > big trouble (big for me of course). I would also apologize for my > english. I'am from Poland and english isn't my nativ language. Here > is some kind of map. It should illustrate my problem. > > LAN INTERNET > > +--------------+ > | COMP. A | > | 192.168.1.10 |-----+ > +--------------+ | +----------------+ +----------+ > |----| DEBIAN MACHINE |----------|xSDL MODEM|--ISP-- > +--------------+ | | 192.168.1.1 | +----------+ > | COMP. B |-----+ +----------------+ 195.117.3.4 > | 192.168.1.11 | | 195.117.3.5 > +--------------+ | +------------+ > +---| WWW SERVER | > +------------+
Nice ASCII art! ;-) Better than I could do -- or would have the
patience to do.
Just to get you started w/o going insane on Firewall rules, I'd
suggest you upgrade your kernel to >= 2.4.0 and install the
iptables package. You can do this with the default Debian packages,
or you can compile your own kernel. Completely up to you.
Packages: kernel-image-2.4.0, iptables
or: kernel-source-2.4.2, kernel-package, build-essential
After you've installed the new kernel and iptables tool, you can set
up Destination Network Address Translation (DNAT) and Source Network
Address Translation (SNAT), otherwise refered to as port forwarding
and masquerading, respectively.
There is some documentation on how to do this in
/usr/share/doc/iptables. You should also consult IPCHAINS-HOWTO at
http://www.linuxdoc.org and subscribe to debian-firewall email list.
Good luck!
--
Chad Walstrom <[EMAIL PROTECTED]> | a.k.a. ^chewie
http://www.wookimus.net/ | s.k.a. gunnarr
Key fingerprint = B4AB D627 9CBD 687E 7A31 1950 0CC7 0B18 206C 5AFD
pgpNyXBC6GLBB.pgp
Description: PGP signature
