NAT only selected bridges

[Pekka Järvinen <pekkajarvinen@xxxxxxxxxxx>]

Hello,

I have
VLAN 111 - LAN
VLAN 222 - WLAN
VLAN 333 - ADSL Modem
VLAN 444 - Internet (connecting through VLAN 333)

br0 - Internet
br1 - LAN 192.168.0.0/24
br2 - WLAN 192.168.1.0/24

With current setup br1 and br2 are NAT'ed correctly but connections 
coming straight from br0 are NAT'ed too for some reason.

So I'm trying to set up rules for something like:
NAT br1 and br2 and don't change IP addresses coming directly from br0 
(or VLAN 444).


Here's /etc/network/interfaces:
auto lo
iface lo inet loopback

allow-hotplug eth0
allow-hotplug eth1

iface eth0 inet static
iface eth1 inet static

auto br0
auto br1
auto br2

# Internet bridge
iface br0 inet static
       address 62.204.1.12
       netmask 255.255.255.128
       gateway 62.204.1.1
       bridge_ports eth1.333 eth0.444
       bridge_stp on
       post-up iptables -t nat -A POSTROUTING -o br0 -j MASQUERADE
       pre-down iptables -t nat -D POSTROUTING -o br0 -j MASQUERADE

# LAN bridge
iface br1 inet static
       address 192.168.0.1
       netmask 255.255.255.0
       bridge_ports eth0.111
       bridge_stp on

# WLAN bridge
iface br2 inet static
       address 192.168.1.1
       netmask 255.255.255.0
       bridge_ports eth0.222
       bridge_stp on

# -----

ipv4 forward is enabled.

--
Pekka Järvinen
--
To unsubscribe from this list: send the line "unsubscribe netfilter" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at  http://vger.kernel.org/majordomo-info.html