I've been playing around with an MT box for a while. I set up a small test network to play around with routing and NAT. What I had was a box set up with 2 ethernet cards and a computer set up on each card. Each ethernet card was given a different network address. Ether 1 was given 10.10.0.0/24 and ether 2 was given 10.10.11.0/24. By using NAT masquerade I was able to ping through the MT box each way from each machine successfully.

Now, when I hooked up the MT box to the internet I could no longer ping through anymore. I could ping each computer from the MT box with its ping utility but I couldn't ping from the computer on the 10.10.0.0/24 network to the machine on the 10.10.11.0/24 network behind the MT box and vice-versa.

What would be preventing me from pinging through the MT box when all I did was connect the MT box to the our network?

~Sean

default routes.

think you have to NAT outgoing connections, so that both networks can see eachother.

I have masquerade set up for the local network side of thing so clients on the local side can get out on the network. What kind of NAT rule would I add so that the public side can see the local side of the network?

~Sean

Ok, I found out what I need to do to get this to work. What I need to do is use port forwarding so that when I type 10.10.0.253:8080 (MT box address) in my web browser the router will then forward that address to 10.10.10.2:80 (radio address).

Would anyone be able to explain how I would go about setting this up in MT?

~Sean

Hrm, I think I have this figured out. I can see the router receiving the packets and passing them along but I'm not getting a response back from the radio on the other side. I've also noticed that I am unable to use the ping utility in the MT box to ping the radios. I know they are pingable.

On the test box I've been working with on the desk here I could ping the radio from the MT box and log into the radio from the public side.

Any reason why I wouldn't be able to ping the radio on the local side from the MT box? I've even disabled all rules in the firewall/NAT/mangle except for the ones that allow me to do what I need to.

~Sean