Re: [B.A.T.M.A.N.] MASQUERADING on the gate0 NIC

[Simon Wunderlich <simon.wunderlich@s2003.tu-chemnitz.de>]

[-- Attachment #1: Type: text/plain, Size: 1432 bytes --]

Hello Derek,

BATMAN will only open one gate0, so this should be fine. The tunnel is
always pointing to the currently selected gateway. Make sure that
you add something like "--source 192.168.100.0/24" to your iptables
line, otherwise other packets might make into in your NAT which you
don't want there (e.g. from wifi interfaces). Only the packets from 
your local ([V]AP?) network should be there.

regards,
	Simon


On Mon, Nov 17, 2008 at 11:56:34PM -0000, Derek C wrote:
> Hi again,
> 
> I'm currently testing with a few openwrt boards - generally its going well
> and I'm connected to the Internet via a BATMAN node thats talking to a
> gateway node - pretty good stuff.
> 
> I've noticed something.  On my (non gateway) node the traffic is going out
> the "gate0" tunnel NIC.  My notebook is connected wirelessly to an [V]AP
> on the node so I need to have a MASQUERADE rule on the gate0 NIC to allow
> my local AP subnet (192.168.100.0/24) Internet access.
> 
> In a live network, with lots of nodes, will there still only ever be one
> gateX NIC ? - is it enough to just have an "iptables -t nat -A POSTROUTING
> -o gate0 -j MASQUERADE" rule ?
> 
> thanks very much for all the help
> 
> Derek
> 
> 
> -- 
> Derek C
> 
> _______________________________________________
> B.A.T.M.A.N mailing list
> B.A.T.M.A.N@open-mesh.net
> https://list.open-mesh.net/mm/listinfo/b.a.t.m.a.n
> 

[-- Attachment #2: Digital signature --]
[-- Type: application/pgp-signature, Size: 189 bytes --]