Masquerading my internet connection

English Network/Internet
#1

I have set up a dhcp-server network with the ip range 10.10.0.0/16
My netbook is the gateway 10.10.0.1
My other laptops and android phones are connecting fine to this network.(I can ping them)
(And also I am using application called hostapd which allows converting a wifi adapter into an access point and provide privileges such as WPA authentication and ssid name definition)

The above setup worked in ubuntu 12.04

The problem:

I wish to share my ppp0 usb modem internet connection by entering the following iptables rule that worked in ubuntu.

iptables -t nat -A POSTROUTING -s 10.10.0.0/16 -o ppp0 -j MASQUERADE

It doesn’t seem to have the same effect under openSUSE 12.1

Does anyone know if this rule is correct? Is there a better way of doing masquerading in Yast? - I just need to share the internet browsing and email services.

#2

You can set up masquerading in Yast using the Security and Users > Firewall module

Whether it’s ‘better’ or not to use Yast is debatable but it worked ok for me when I set up a machine to work as a router some time ago, couldn’t get it to work when one of the adapters was wi-fi though but it was a few opensuse versions back

#3

iptable rules that work for me are:

iptables --flush
iptables --table nat --flush
iptables -P FORWARD ACCEPT
iptables -P INPUT ACCEPT
iptables -P OUTPUT ACCEPT
iptables -A POSTROUTING -t nat -s 192.168.17.0/24 -o eth0 -j MASQUERADE

Flushing the rules will strip your machine open but it was the only solution for me without spending too much time figuring out how to prioritize the rules.