double masquerading

Hi there: I'm trying to set up a home network (192.168.1.0) following the
home-network-mini-howto. The home-network is working between the desktop
and my laptop using two wireless cards.
Now, I would like to access the inet from the laptop via the desktop. The
latter is connected to the inet via some local provider. It gets its IP
via dhcp that seems to be a private network as well. It's IP is
192.168.3.100 and it routes via 192.168.3.1
My question: can I nevertheless use masquerading on the desktop. I'm
asking b/c I read somewhere that you need a valid Inet IP (ie not a
private one) to do masquerading.
Any advice also on alternative solutions greatly appreciated.
Many thanks,
Gerald

Hi there: I'm trying to set up a home network (192.168.1.0) following the
home-network-mini-howto. The home-network is working between the desktop
and my laptop using two wireless cards.
Now, I would like to access the inet from the laptop via the desktop. The
latter is connected to the inet via some local provider. It gets its IP
via dhcp that seems to be a private network as well. It's IP is
192.168.3.100 and it routes via 192.168.3.1
My question: can I nevertheless use masquerading on the desktop. I'm
asking b/c I read somewhere that you need a valid Inet IP (ie not a
private one) to do masquerading.
Any advice also on alternative solutions greatly appreciated.
Many thanks,
Gerald

Gerald Willmann wrote:
> Hi there: I'm trying to set up a home network (192.168.1.0) following the
> home-network-mini-howto. The home-network is working between the desktop
> and my laptop using two wireless cards.
> Now, I would like to access the inet from the laptop via the desktop. The
> latter is connected to the inet via some local provider. It gets its IP
> via dhcp that seems to be a private network as well. It's IP is
> 192.168.3.100 and it routes via 192.168.3.1
> My question: can I nevertheless use masquerading on the desktop. I'm
> asking b/c I read somewhere that you need a valid Inet IP (ie not a
> private one) to do masquerading.
> Any advice also on alternative solutions greatly appreciated.
> Many thanks,
> Gerald


You needn't double-post.

And, yes, You can "double-masquerade". You should see that when MASQ-
ing from one private address space to another, the masq'ing router
will not get confused. So if that thing is on a ..3. subnet, the range
that it is masquerading should have a different network address. This is
only for convenience, because once things are set up tightly, there will
not be any conflict anyways.

As for masquerading, there's no limit. You can masquerade connections
billions of times, as long as You follow the rules.

As for posting, if You double-post by accident, everybody will forgive
You. But if You do that too often, You will either get black-listed, or
anybody in this NG living near You will stand up and kill You. - So,
I'd go for masquerading.


Cheers, Jack.

--
----------------------------------------------------------------------
My personal reading of the string "MicroSoft" expands to "NanoWeak"...

On Tue, 24 Feb 2004, jack wrote:

> As for masquerading, there's no limit. You can masquerade connections
> billions of times, as long as You follow the rules.

Hi Jack: thanks for the info.

> As for posting, if You double-post by accident, everybody will forgive
> You. But if You do that too often, You will either get black-listed, or
> anybody in this NG living near You will stand up and kill You. - So,
> I'd go for masquerading.

The first time around it didn't show up and since there have been
problems with the newsserver before I decided to try again.
Should I get life insurance, or is masquerading enough?
Btw, I live 5000 miles away from the machine I'm posting from

thanks, Gerald