[Voyage-linux] routing from WLAN

[(spam-protected)]

Unfortunately node1 cannot be the AP cos is too far away from node3.

So far I have a solution that seems working fine:

iptables -A FORWARD -i wlan0 -o eth0 -j ACCEPT
iptables -A FORWARD -i eth0 -o wlan0 -j ACCEPT
iptables -A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT
iptables -A OUTPUT -m state --state ESTABLISHED,RELATED -j ACCEPT

Every node successfully ping google (amen) and all packets are successfully forwarded to the node1 but, for some reason, every node fails fetching http://ftp.hk.debian.org... 
Could it be related to rules that I've configured?

Moreover, I found another common rule that could help me but I'm not good enough to understand how to modify it for my specific case:
iptables -t nat -A POSTROUTING -o eth0 -j MASQUERADE

In my case, there is no ppp connection and IP are static. I think i should use the snat target but I cannot exactly understand what the rule will imply.

May I have your advise?

Thanks

Davide



On 9 Sep 2011, at 16:44, Sebastian Robitzsch wrote:

> the answer is NAT on node1 including the corresponding routes set up on
> node 1 between eth0 and wlan0/ath0. However, I recommend using node 1 as
> the AP because otherwise you need to make sure that all the traffic goes
> directly to the client (node 1) instead of getting routed through the AP
> (node 2).
> 
> An easy to follow howto for NAT can be found here:
> http://seronline.de/?p=53
> 
> 
> Cheers,
> Sebastian
> 
> On Fri, 2011-09-09 at 14:26 +0100, themrorange at gmail.com wrote:
>> Hi,
>> 
>> I have a WLAN network of three devices {node1, node2, node3}, static IP are 192.168.2.1, 192.168.2.2, 192.168.2.3.
>> 
>> The access point is node2 so node1 and node3 are stations for node2.
>> 
>> Node1 is the only one that has access to internet by eth0. eth0 at node1 has a static ip.
>> 
>> Node2 and node3 can connect to node1.
>> Node 1 can connect to internet.
>> Node2 and node3 can NOT connect to internet.
>> How should I configure node2 and node3 in order to reach internet? 
>> 
>> 
>> Many thanks
>> 
>> 
>> Davide
>> _______________________________________________
>> Voyage-linux mailing list
>> Voyage-linux at list.voyage.hk
>> http://list.voyage.hk/mailman/listinfo/voyage-linux
> 
> -- 
> Sebastian Robitzsch
> PhD Candidate
> University College Dublin
> School of Computer Science & Informatics
> Belfield
> Dublin 4
> Ireland
> 
> Mobile:         +353 (0)86 - 22 10 988
> Mail:           sebastian.robitzsch at ucdconnect.ie
> WWW:            www.seronline.de
> 
> Skype:          seronline82
> Google/Jabber:  srobitzsch at googlemail.com
> 
> Mendeley:       www.mendeley.com/profiles/sebastian-robitzsch
> Twitter:        www.twitter.com/seronline
> Identi.ca:      www.identi.ca/seronline
> -----------------------------------------------------
> 
> 
> 
> _______________________________________________
> Voyage-linux mailing list
> Voyage-linux at list.voyage.hk
> http://list.voyage.hk/mailman/listinfo/voyage-linux