ipchains (again)

Hey All,

I'm sure this has been covered somewhere, but for the life of me cannot find
it,

The situation is, one box, two nics.

nic one -> static IP address, routed through adsl modem. (210.8.131.XXX)
(ETH0)
nic two -> dhcp'ing 192.168 address --> net interface 192.168.0.1 (ETH1)

I can reach the internet from nic one without a problem, but trying to get
out
from nic two, does not work, I believe it's a problem with it not
masquerading
correctly... or at all..

My route table

<snip>
[root@privatelan /]# route
Kernel IP routing table
Destination     Gateway         Genmask         Flags Metric Ref    Use
Iface
210.8.131.XXX   *               255.255.255.240 U     0      0        0 eth0
192.168.0.0     *               255.255.255.0   U     0      0        0 eth1
169.254.0.0     *               255.255.0.0     U     0      0        0 eth1
127.0.0.0       *               255.0.0.0       U     0      0        0 lo
default         gateway.XXX 0.0.0.0         UG    0      0        0 eth0
</snip>

iptables at present
<snip>

*filter
:INPUT ACCEPT [0:0]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [0:0]
:RH-Lokkit-0-50-INPUT - [0:0]
-A INPUT -j RH-Lokkit-0-50-INPUT
-A FORWARD -j RH-Lokkit-0-50-INPUT
-A RH-Lokkit-0-50-INPUT -p tcp -m tcp --dport 22 --syn -j ACCEPT
-A RH-Lokkit-0-50-INPUT -i lo -j ACCEPT
-A RH-Lokkit-0-50-INPUT -i eth1 -j ACCEPT
-A RH-Lokkit-0-50-INPUT -i eth0 -j ACCEPT
-A RH-Lokkit-0-50-INPUT -p udp -m udp -s 192.189.54.17 --sport 53 -d 0/0 -j
ACCE
PT
-A RH-Lokkit-0-50-INPUT -p udp -m udp -s 203.8.131.1 --sport 53 -d 0/0 -j
ACCEPT
-A RH-Lokkit-0-50-INPUT -p udp -m udp -s 192.189.54.33 --sport 53 -d 0/0 -j
ACCE
PT
-A RH-Lokkit-0-50-INPUT -p tcp -m tcp --syn -j REJECT
-A RH-Lokkit-0-50-INPUT -p udp -m udp -j REJECT
COMMIT

</snip>

Can someone shed me some light in what I need to add to get masquerading
working correctly.

I've already got this in

echo 1 >>/proc/sys/net/ipv4/ip_forward


examples of ping

[eth0]

[root@privatelan /]# ping 192.189.54.17
PING 192.189.54.17 (192.189.54.17) 56(84) bytes of data.
64 bytes from 192.189.54.17: icmp_seq=1 ttl=251 time=18.8 ms
64 bytes from 192.189.54.17: icmp_seq=2 ttl=251 time=14.7 ms


[eth1]

[root@privatelan /]# ping -I eth1 192.189.54.17
PING 192.189.54.17 (192.189.54.17) from 192.168.0.1 eth1: 56(84) bytes of
data.
>From 192.168.0.1 icmp_seq=1 Destination Host Unreachable
>From 192.168.0.1 icmp_seq=2 Destination Host Unreachable
>From 192.168.0.1 icmp_seq=3 Destination Host Unreachable


Thanks

Simon