[Cerowrt-devel] double_nat_question

[Oliver Niesner]

Hi all,

I hope someone could help me, it seems that i doesn't get it or misinterpret
something :-/

I want to get rid of double NAT in my small network at home, but it seems it
only works, if i use an extra iptables MASQUERADE rule on my pc which does all
the firewalling dhcp etc..

My setup:	^
		|internet
		|					
 -------------------------			------------------------
|			 |			| firewall pc		|
| dsl-router		 |			|dhcp, small		|
|(NAT, no CEROwrt!	 |----------eth0--------|webserver etc.		|
|ip, static=192.168.0.199|	192.168.0.1	|---------------|--------
|------------------------					|
								|
								eth1,
								192.168.1.1
								|
								|
				--------------------------------|
				|	WAN=192.168.1.86	|
		WLAN------------|	CEROwrt			|
				---------------------------------


This setup works fine, but only when i do MASQUERADE on eth0, on my firewall pc!
I thought it must be possible, that only my dsl-router is doing the NAT and
everything else is routed inside the private net!
(the necessary routes are set, every machine could ping each other)
What i'm missing?

thx,

Oliver