Internet Connection Sharing

[Henry2630]

This may be a really stupid question, but I'm a "newbie" and if you don't ask, you never get an answer!

I've been using Internet Connection Sharing on W2K and XP for donkey's years and always taken it for granted that the ICS box has to have an IP Address of 192.168.0.1 and all workstations must have addresses in the 192.168.0.x range.

I don't want to have my workstations on a 192.168.0.x range, I want to have them on the same address range as my ADSL Router which is 192.168.2.1. Ideally I would like all my workstations on 192.168.2.10 to 192.168.2.199 and my servers / printers etc on 192.168.2.200 - 254

Can this be done? Can I leave my ADSL Router on 192.168.2.1, and let the ADSL Router's DHCP give me a (permanent) address of say 192.168.2.3 to my Public NIC and then can I give a static IP address of say 192.168.250 to the second Private NIC and let my DHCP Server hand out addresses in the range 192.168.2.10 to 192.168.2.199?

If this is possible, can someone point me to a URL or give me some clues as to how to do it. I also need to be able to forward ports to a different server for FTP and another for iPrint etc.

[gr8dude]

Try with Firestarter [ http://www.fs-security.com/ ]

It can be done with a couple of clicks, I am playing with it myself. I still haven't succeeded - but i certainly know that this is the right tool.

[Henry2630]

Nope, I actually use Firestarter, but it won't forward the Ports, it SAYS it is forwarding them, but it doesn't

[gr8dude]

Now it works for me.

First of all, the problem was that on the other PC, I accidentally set the ip of the gateway to the ip of that machine, instead of the ip of the Fedora-box. However this is not the cause, because during the experiments I kept playing with ip's, and i am sure that the correct ip of the gateway was previously set.

What could be causing this is the following change

echo 1 > /proc/sys/net/ipv4/ip_forward
echo 1 > /proc/sys/net/ipv4/tcp_syncookies

And now everything works. I did do other changes to the system in the meantime, therefore I am not certain about the fact that this is the change that fixed it.. But this is all I can remember.

Let me know if this worked

[Henry2630]

Do you have 2 NICS in your Internet Fedora box? Are they on 2 different networks like mine i.e 192.168.2.0 and 192.168.0.0?.

I've entered your two commands, but I have no way to test it until tomorrow. I'll let you know the outcome.

[gr8dude]

yes, two distinct network cards on two distinct networks:

eth0: 5.74.2.37 [255.255.255.0], goes to the internet via pppoe
eth1: 10.200.1.129 [255.0.0.0], for the LAN

I use ppp0 as my external connection, and eth1 as my local connection.