> As for accessing the internet from the private network alone, > you don't need routing. Masquerade will do. Try adding this > rule to your firewall and see if the private 'net can ping the > internet (don't forget to configure the machines in the private > net with 10.0.0.2 as default gateway): > ipchains -I forward -s 10.0.0.0/255.0.0.0 -d 0.0.0.0/0.0.0.0 -j MASQ Whee! That works. Figures -- three obnoxious "gurus" told me that I was wasting my time on masq & that I needed route, "Only routed will allow you to route the packets through the Linux box to the W98. I wonder, though, why can't I ping the Linux box from W98 now? > Hm - if I were you, I'd try to kick Rhiannon (the 10.0.0.3, > right?) out of the routing tables. This route says that to > reach Rhiannon, the machine has to send packets to 10.0.0.1 > (that was Ra-Hoor, IIRC), which is clearly a nonsense. Hmm. Wonder where I did that. Know what file I'd edit -- there have been so many I've opened & some I've edited, though only one today ifcfg-eth0:1. > Otherwise, the table looks fine. The route #2 is, I think, > unnecessary, but doesn't seem to disturb either. Your two > subnets are covered by #3 and #4 (the local network is > currently 10/8, the route will change when you change eth0:1 to > 10.0.0/24, as this is IIRC what you want), and the default gw > is the last route. If you mean to change the line in the eth0:1 file from 10.0.0.2 to 10.0.0/24 I then bring eth0 down then up I get: # /sbin/ifup eth0 /etc/sysconfig/network-scripts/ifup-aliases: ipseen_10_0_0_0/24=ifcfg-eth0:1: No such file or directory error in ifcfg-eth0:1: already seen ipaddr 10.0.0.0/24 in /24 SIOCADDRT: Network is unreachable > my stupidity (reconfigured the kernel and recompiled without > saving the reconfigured Makefile - D'oh!) Eek! -- God is Dead. -Nietzsche Nietzsche is Dead. -God Nietzsche is God. -Dead To unsubcribe send e-mail with the word unsubscribe in the body to: Linux-Anyway-Request@xxxxxxxxxxxxx?body=unsubscribe