Agiofws :i need to ask a simple Q on NAT & statci routing i have drawn the topology to make things simpler  which you can find in http://img417.imageshack.us/my.php?image=mylanblack9zq.jpg 
Agiofws: my question is  that for 2.x to receive INET  do i have to enable NAT  on 1.1   AND  make a static ROUTE  to 2.X  from router  1.1 or is the second action not necassary  ?


danieldg : the second action is necessary unless you want 2.4 to also do NAT (which should be avoided if possible)

Agiofws do i also need to do the same static route on  1.2  to  to see 2.x   subnet ?
danieldg depends on what you mean by "only NAT". NAT is just address translation... routing is different
danieldg no, 1.2 will send packets to 1.1, which will send them to 2.x
danieldg you _could_ add the route, if you wanted it a bit faster
danieldg but it's not needed


Agiofws but if i do the same static route on  1.2  to  to see 2.x   it won't send them to 1.1 right 
Agiofws ok.. thaks again most gratfull 
Agiofws and a 3rd question 
Agiofws if i set up a webserver on 2.3 say   do i do packet forwarding  on 1.1 ? and how would i issue it in linux ?
Agiofws with the route command ?
Agiofws with iptables ?

danieldg iptables
danieldg after the routes have been added, add a DNAT rule to the firewall

Agiofws is via in the command ?
danieldg yes
Agiofws eth1 is 1.10 right ? no its the eth1 card of 1.1 ?
danieldg eth1 is the interface 1.1 is on
Agiofws if i have everything to accept  will i need to issue an iptables rule ?
danieldg for the server, yes
danieldg but not simply for this route
Agiofws ?
danieldg no
say like ports 80 yes ?
danieldg input & output are used only for the local machine
Agiofws on 1.1 ?
danieldg yes
Agiofws if on 1.1 if everything was on drop policy i would have to issue an iptable rule to open inbound outbound traffic on port 80 
Agiofws something like that right ?