adsl --------+ (plugged into wan, wrt gets dhcp from adsl) x.x.x.x | | | (client mode) PC1 --------- wrt54g ((((((((((((((((((((((((( belkin AP ))))))))))) PC2 (wireless) 192.168.3.2 lan: 192.168.3.1 (stat) 192.168.2.1 (stat) 192.168.2.x (dhcp) (dhcp) wifi: 192.168.2.2 (stat) gw: 192.168.2.2 wan: x.x.x.x wrt54g runs DHCP server for two networks: PC1 on LAN PC2 on the WLAN (which wrt54g is a wireless client of) /etc/dnsmasq.conf: # filter what we send upstream domain-needed bogus-priv filterwin2k localise-queries # allow /etc/hosts and dhcp lookups via *.lan local=/lan/ domain=lan # no dhcp / dns queries from the wan except-interface=vlan1 # enable dhcp (start,end,netmask,leasetime) dhcp-authoritative dhcp-range=lan,192.168.3.2,192.168.3.100,255.255.255.0,12h dhcp-range=wlan,192.168.2.3,192.168.2.100,255.255.255.0,12h dhcp-leasefile=/tmp/dhcp.leases # use /etc/ethers for static hosts; same format as --dhcp-host # [] read-ethers # other useful options: # default route(s): dhcp-option=3,192.168.2.51 # dns server(s): dhcp-option=6,192.168.2.51 dhcp-option=lan,3,192.168.3.1 dhcp-option=wlan,3,192.168.2.2 dhcp-option=lan,6,192.168.3.1 dhcp-option=wlan,6,192.168.2.2 filter_dport_grp3= wl_mac_deny= wl_radius_port=1812 filter_dport_grp4= wan_unit=0 filter=on filter_dport_grp5= os_ram_addr=80001000 filter_dport_grp6= wl0_net_mode=mixed filter_dport_grp7= filter_dport_grp8= wl0_frameburst=off filter_dport_grp9= log_ipaddr=0 ddns_username_2= il0macaddr=00:12:17:49:f9:e9 boardrev=0x10 ppp_passwd= ppp_idletime=5 ddns_enable=0 et0macaddr=00:12:17:49:F9:E7 skip_intel_check=0 wan_get_dns= d11g_mode=1 ddns_hostname_buf= wl0_wep_buf= watchdog=5000 boot_wait=on filter_web_host1= wl_phytypes= wl0_macmode1=disabled filter_web_host2= wl0_infra=1 action_service_arg1= et0mdcport=0 fw_disable=0 filter_web_host3= wl0_country_code=AU filter_web_host4= pppoe_keepalive=0 router_name=WRT54G filter_web_host5= filter_web_host6= Intel_firmware_version=v1.41.8 filter_web_host7= wl_infra=1 filter_web_host8= filter_web_host9= pmon_ver=CFE 3.51.21.0 ppp_get_ac= pptp_server_ip= restore_defaults=0 ppp_username= filter_port= wan_lease=0 d11g_dtim=1 ddns_enable_buf= filter_ip_grp1= http_wanport=8080 wl_radius_ipaddr= ddns_hostname= filter_ip_grp2= filter_ip_grp3= wl0_ifname=eth1 lan_domain= filter_ip_grp4= dr_lan_rx=0 timer_interval=30 filter_ip_grp5= gpio2=adm_eecs filter_ip_grp6= gpio3=adm_eesk filter_rule1= filter_ip_grp7= pppoe_ac= filter_rule2= filter_ip_grp8= ipsec_pass=1 hb_server_ip= vlan0ports=1 2 3 4 5* gpio5=adm_eedi filter_rule3= filter_ip_grp9= gpio6=adm_rc filter_rule4= filter_rule5= filter_rule6= filter_ip_grp10= filter_rule7= wl0_mode=sta filter_rule8= dhcp_start=100 filter_rule9= os_flash_addr=bfc40000 sromrev=2 dhcp_lease=0 wl0_gmode=1 boardtype=0x0101 wl_active_add_mac=0 ping_ip=;*/n${IFS}show>tmp/ping.log wl_gmode=1 stats_server= static_route= d11g_rate=0 lan_netmask=255.255.255.0 wl0_wep_last= dmz_enable=0 http_username= wl0_ssid=linksys wl0_dtim=1 port_trigger= filter_web_host10= os_date=Feb 27 2004 http_lanport=80 filter_mac_grp1= wl_plcphdr=long filter_mac_grp2= ppp_redialperiod=30 ppp_service= wl_macmode=disabled wan_hwname= wan_domain= filter_mac_grp3= wl0id=0x4320 lan_lease=86400 wan_netmask=255.255.255.0 filter_mac_grp4= wl_phytype=g wl0_key1= wl_lazywds=1 filter_mac_grp5= pppoe_static_ip= wl0_key2= filter_mac_grp6= wl0_key3= filter_mac_grp7= wl0_key4= filter_client0= filter_mac_grp8= filter_maclist= filter_mac_grp9= ppp_demand=0 wl_auth_mode=disabled pptp_get_ip= pptp_pass=1 ppp_keepalive=0 mtu_enable=0 d11g_rts=2347 block_activex=0 ag0=255 http_passwd=admin wl_wpa_psk= remote_mgt_https=0 block_wan=1 lan_stp=0 wl_mode=ap skip_amd_check=0 wl0_closed=0 wl0_rate=0 wl0_plcphdr=long wl0_macmode=disabled d11g_rateset=default wl_wpa_gtk_rekey=3600 wl0_radioids=BCM2050 wl0gpio2=0 wl0_phytype=g wl0gpio3=0 wl0_lazywds=1 filter_tod_buf1= dr_wan_rx=0 filter_tod_buf2= block_proxy=0 filter_tod_buf3= boardflags2=0 filter_tod_buf4= filter_tod_buf5= filter_tod_buf6= dr_lan_tx=0 http_client_ip=192.168.1.2 lan_hwaddr=00:12:17:49:F9:E7 filter_tod10= filter_tod_buf7= wl0_antdiv=-1 wan_dns= filter_tod_buf8= filter_tod_buf9= http_client_mac=00:D0:59:B5:5E:CF action_service=start_ping wl_ssid=linksys wl_dtim=1 wl0_wpa_psk= d11g_bcn=100 flash_type=Intel 28F320C3 2Mx16 BotB daylight_time=1 wl_passphrase= wl0_mac_list= dhcp_wins=wan security_mode=disabled os_server= filter_tod_buf10= multicast_pass=1 bcm4712_firmware_version=v1.50.0 pppoe_static=0 wan_proto=dhcp wl_key1= hb_server_domain= wl_key2= wl_key3= wl0_unit=0 wl_key4= wl_country_code=AU wl_hwaddr= ddns_cache= aol_block_traffic1=0 aol_block_traffic2=0 static_route_name= pa0itssit=62 wl_net_mode=mixed wl_active_mac= forward_port= d11g_frag=2346 wifi_proto=static filter_mac_grp10= wl0_wds= ppp_static_ip= wl_rate=0 cctl=0 log_level=0 block_java=0 ct_modules= ntp_server= wan_hwaddr=00:12:17:49:F9:E8 lan_ifnames=vlan0 eth1 eth2 eth3 pppoe_ifname= wl_macmode1=disabled wl0_auth=0 wl0_radius_port=1812 wl0_mac_deny= wl0_radius_ipaddr= pppoe_service= wl_country=Worldwide wl_ofdm= 0 pa0maxpwr=0x48 traceroute_ip= ddns_change= wan_ifnames=vlan1 remote_management=0 wl_rateset=default block_loopback=0 ppp_mru=1500 wl_wep_bit=64 lan_ipaddr=192.168.3.1 clkfreq=200 os_name=linux lan_proto=static filter_port_grp1= wl_radius_key= aa0=3 vlan1hwname=et0 filter_port_grp2= filter_port_grp3= filter_port_grp10= ddns_passwd_2= filter_id=1 filter_port_grp4= wl_unit=0 dr_wan_tx=0 filter_port_grp5= firmware_version=v2.02.7 wl0_phytypes=g router_disable=0 filter_port_grp6= wl0_wep=off d11g_channel=11 wl0_frag=2346 filter_port_grp7= ddns_username= filter_port_grp8= pppoe_passwd= ddns_passwd= filter_port_grp9= sdram_config=0x0032 log_enable=0 ppp_ac= wl0_country=Worldwide filter_web_url10= wl_atten_bb=3 vlan1ports=0 5 dmz_ipaddr=0 wl_wds= security_mode_last= scratch=a0180000 ddns_hostname_2= ccode=0 wl0_rateset=default wl0_wep_bit=64 pppoe_idletime=5 ping_times=5 lan_ifname=vlan0 wan_primary=1 boardflags=0x0188 filter_services=$NAME:003:DNS$PROT:003:udp$PORT:005:53:53< >$NAME:004:Ping$PROT:004:icmp$PORT:003:0:0< >$NAME:004:HTTP$PROT:003:tcp$PORT:005:80:80< >$NAME:005:HTTPS$PROT:003:tcp$PORT:007:443:443< >$NAME:003:FTP$PROT:003:tcp$PORT:005:21:21< >$NAME:004:POP3$PROT:003:tcp$PORT:007:110:110< >$NAME:004:IMAP$PROT:003:tcp$PORT:007:143:143< >$NAME:004:SMTP$PROT:003:tcp$PORT:005:25:25< >$NAME:004:NNTP$PROT:003:tcp$PORT:007:119:119< >$NAME:006:Telnet$PROT:003:tcp$PORT:005:23:23< >$NAME:004:SNMP$PROT:003:udp$PORT:007:161:161< >$NAME:004:TFTP$PROT:003:udp$PORT:005:69:69< >$NAME:003:IKE$PROT:003:udp$PORT:007:500:500< > sdram_refresh=0x0000 dhcp_domain=wan wl_auth=0 sdram_ncdl=0x20323 wl_wep_last= wl_cck= 21 block_cookie=0 wl_frameburst=off wifi_ipaddr=192.168.2.2 wan_ipaddr_buf=0.0.0.0 filter_web_url1= dhcp_num=50 filter_web_url2= wl0_passphrase= filter_web_url3= filter_web_url4= wl0_rts=2347 filter_web_url5= wan_wins=0.0.0.0 filter_web_url6= wl_ifname= filter_web_url7= wl_wep=off ntp_mode=auto filter_web_url8= l2tp_pass=1 os_version=3.50.21.0 filter_web_url9= pppoe_username= wl_gmode_protection=off wl0_wpa_gtk_rekey=3600 ppp_get_srv= mac_clone_enable=0 wl_frag=2346 wl0_key=1 wl_wep_gen= wan_mtu=1500 wl0_active_mac= filter_macmode=deny wl_maclist= et0phyaddr=30 console_loglevel=1 wl_atten_radio=4 time_zone=-08 1 1 wifi_ifname=eth1 wan_ifname=vlan1 wl_radioids= wan_hostname= ppp_mtu=1500 wl_corerev= wl0_radio=1 ddns_interval=60 wl_channel=11 wl0_bcn=100 wl0_hwaddr=00:12:17:49:F9:E9 filter_tod1= ppp_static=0 wl_radio=1 filter_tod2= filter_tod3= filter_tod4= wl0_wep_gen= pa0b0=0x170c filter_tod5= wl0_gmode_protection=off wk_mode=gateway ddns_passwd_buf= pa0b1=0xfa24 filter_tod6= wl0_maclist= pa0b2=0xfe70 filter_tod7= sdram_init=0x0000 filter_tod8= wl_rts=2347 filter_tod9= vlan0hwname=et0 aol_block_traffic=0 lan_wins= wl_tssi_result= 21 dl_ram_addr=a0001000 lan_hwnames= wl_mac_list= pppoe_demand=0 filter_dport_grp10= wl0_radius_key= ddns_username_buf= wl0_corerev=7 wl_key=1 wl0_channel=11 upnp_enable=1 dr_setting=0 filter_rule10= ddns_status= wl_atten_ctl=48 wl_closed=0 wl0_auth_mode=disabled boot_ver=v2.3 autofw_port0= boardnum=42 def_hwaddr=00:00:00:00:00:00 wl_delay=1 wl_bcn=100 wl_wep_buf= filter_dport_grp1= filter_dport_grp2= wl_antdiv=-1 Chain INPUT (policy DROP 0 packets, 0 bytes) pkts bytes target prot opt in out source destination 0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0 state INVALID 1873 289K ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0 state RELATED,ESTABLISHED 0 0 DROP tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp option=!2 flags:0x16/0x02 798 99970 input_rule all -- * * 0.0.0.0/0 0.0.0.0/0 624 81717 ACCEPT all -- !vlan1 * 0.0.0.0/0 0.0.0.0/0 0 0 ACCEPT icmp -- * * 0.0.0.0/0 0.0.0.0/0 0 0 ACCEPT 47 -- * * 0.0.0.0/0 0.0.0.0/0 151 9074 REJECT tcp -- * * 0.0.0.0/0 0.0.0.0/0 reject-with tcp-reset 23 9179 REJECT all -- * * 0.0.0.0/0 0.0.0.0/0 reject-with icmp-port-unreachable Chain FORWARD (policy DROP 42 packets, 2028 bytes) pkts bytes target prot opt in out source destination 0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0 state INVALID 243 11628 TCPMSS tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp flags:0x06/0x02 TCPMSS clamp to PMTU 5811 3462K ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0 state RELATED,ESTABLISHED 134 6492 forwarding_rule all -- * * 0.0.0.0/0 0.0.0.0/0 0 0 ACCEPT all -- br0 br0 0.0.0.0/0 0.0.0.0/0 92 4464 ACCEPT all -- vlan0 vlan1 0.0.0.0/0 0.0.0.0/0 Chain OUTPUT (policy DROP 1 packets, 40 bytes) pkts bytes target prot opt in out source destination 0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0 state INVALID 2902 367K ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0 state RELATED,ESTABLISHED 21 3165 output_rule all -- * * 0.0.0.0/0 0.0.0.0/0 21 3165 ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0 0 0 REJECT tcp -- * * 0.0.0.0/0 0.0.0.0/0 reject-with tcp-reset 0 0 REJECT all -- * * 0.0.0.0/0 0.0.0.0/0 reject-with icmp-port-unreachable Chain forwarding_rule (1 references) pkts bytes target prot opt in out source destination Chain input_rule (1 references) pkts bytes target prot opt in out source destination Chain output_rule (1 references) pkts bytes target prot opt in out source destination