> Ah thank you for your reply im a compleaty Newbie with linux, ok yes i do
> have NAT on the main router connected to the cable modem it is using the
> floppy distro FloppyFW (floppyfw.org) i did also have the second router
> setup in the same way, the thing is i just basicly want to avoid nat in the
> second router in order to be able to accsess teh machines directly, basicly
> the reason for having a second router is to enforce firewaling and
> packetshaping on that network as my main router dosnet support it and if i
> were to upgrade i would lose my H323 compatiblity, therefore i haveopted to
> use a comrectial linux like red hat or slackware to route between the two.
> Destination Gateway Genmask Flags Metric
> Ref Use Iface
> 192.168.0.1 * 255.255.255.255 UH 0
> 0 0 eth0
> 192.168.0.2 * 255.255.255.255 UH 0
> 0 0 eth0
> 192.168.0.7 * 255.255.255.0 UH 0
> 0 0 eth1
> 192.168.0.0 * 255.255.255.0 U 0
> 0 0 eth1
> 192.168.0.0 * 255.255.255.0 U 0
> 0 0 eth0
> defualt 192.168.0.1 0.0.0.0 UG 1
> 0 0 eth1
> i laso have proxy arp turned on for both eth1 and eth0 in this configuration
> if i use this i can ping 192.168.0.7 and 192.168.0.1 but i cnat get online
> with it.
> from this what choices do i have and what should i explore ?
[snip]
Does the internet connected router know how to route packets back to
the second LAN? If that router can't deal with IP packets with a
source address of 10.x.x.x, then it will never be able to route. If it
works for LAN 1, then you can either NAT the second LAN (10.x.x.x) to
a first LAN address (192.x.x.x) or make the internet connected router
know what to do with packets that it receives from the second LAN.
If you use iptables, then using NAT is reasonably straight forward. To
get your router configured , then RTFM.
Codfather