Gateway/Router Help needed...

Hey ya'll. Got something I fear may be a custom or slightly unique
situation, and not knwing all the *ahem* proper terms, am unsure where
to start. So! If anyone can point me in a direction to look, to learn
from, it'd be appreciated.

Here's the deal:
Have two LANs. 192.168.2.x (LAN2) and 10.0.0.x (LAN1). LAN2 is a QA
Testing Lab. All systems on LAN2 are given IP's by a server DHCP (LAN2
Server). This LAN2 Servier is running Linux (currently Fedora 5, but
could change.. Even to Windows. Whatever makes it easier.) which is
running the DHCP server. Now, this LAN2 Server is ALSO connected to
LAN1 and is *GIVEN* an IP address by LAN1's server/router/gateway.

So, on a normal day, I want LAN2 Server to be able to access any
network shares/resources on LAN1, including the Internet. I would like
any system on LAN2 to be able to access the shares on the LAN2 Server,
but *NOT* get bridged over to LAN1.

At any specific time, I'd like to ENABLE a system on LAN2 to be allowed
to access LAN1 and the Internet (for updates, etc.) If this means
running a script on the LAN2 server, the that's fine - and expected. I
want the OTHER systems on LAN2 to still NOT have access to LAN1. In
other words, I only want to allow access to the system I designate at
the time. (However, at times I may enable TWO systems at once. Or
three, and so on.)

So, where do I start? I'm going to assume I'll need to modify the
iptables/ebtables(?), unless there's something out there that will
allow this?

Pointers, questions, comments more than welcome.
Thanks!
Mike.

that should be fair easy ...

just install two boxes:


LAN1 Gateway, a simple box with two NICs and Debian netinstall // even
better netinstall 2.6.15, just fetch it here:


http://193.175.22.77/bilders/itnotez...ustom-0206.iso


than install the same system on LAN2 Gateway.



the rest shouldnt be that difficult to set up:


you could do anything with a few simple config files: routing //
filtering // access control; just search for it on the web or ask for
it here.