🚀 go-pugleaf

In article <4v9mrd$hs6@hobyah.cc.uq.oz.au>,
	zzppham@dingo.cc.uq.oz.au (Robert Paul Pham) writes:
> terry@baldric.no.itg.telecom.com.au (Terry Dawson) writes:
> 
>>: I had thought this too actually, but what I find was that as soon as I 
>>: setup a default route to my ISP (I have a static IPaddress), my 
>>: home network stopped working.
> 
>>It that happened then you didn't have your network route in place.
>>Each host should have a network route and a default route.
> 
> I would really appreciate some more elaborate wisdom :-).
> Being a tcp/ip newbie I tried everything, but as soon as a 
> default route is setup to my ISP, all packets from other machines just 
> seems to head straight down sl0 and into oblivion. Do you mean I can 
> setup more than one default route on the Linux box?
> 
> I would really appreciate an example of an /sbin/route command to do 
> this, for the following machines 192.168.100.100 & 192.168.100.101.

Are you using IP_Masquerading?

I use Masq to let my home network gain access to the
net thru my linux box.

You need the "ipfw" command, which you can find at sunsite, and you need 
IP Masq. compiled in the kernel.

Then I setup rc.local in my boot scripts to do this, using ipfw:

# start IP Masquerade if [ -x /sbin/ipfw ] then
       /sbin/ipfw a m all from 192.168.100.100/24 to 0.0.0.0/0
       /sbin/ipfw a m all from 192.168.100.101/24 to 0.0.0.0/0
      	 /sbin/ipfw a m all from 192.168.100.102/24 to 0.0.0.0/0 
fi

This masquerades all packets from the 3 machines on my internal network
and stops them from going out into the ether.

Instead all the packets are "masqueraded" by the IP address assigned by 
your ISP - whether statically or dynamically.

When the packets return, the Linux kernel with the masquerade patch
has the cleverness to work out what masqueraded machine gets which packet.

IP masquerade may suffer from packet fragmentation, which can lead to 
performance problems but you can get around it with careful tuning of MTU.

Remember to get "ipfw" if you plan to do IP masquerade....

rachel