Hello all,

I have a basic network setup of a client, gateway, and server. I am currently setting up my iptables on my gateway. The basic network config looks like this:

[Client]eth1(10.0.254.1) --->eth2(10.0.254.254)[GW]eth1(192.168.0.254) ---> eth1(192.168.0.1)[Server]

The public network is between my Client and GW and the private network is between the GW and Server.

I need to set up my iptables on the GW to enable http and ping traffic from private network (192.168.0.x/24) to public network (10.0.0.x/8).

Any suggestions? Thanks in advance!

I think does what you ask, but you need to enable forwarding, and use a DROP policy where
the lines below offer an exception.
ptiables -t nat -A POSTROUTING -p tcp -s 192.168.0.0/24 -d 10.0.0.0/8 --dport 80 -j MASQUERADE
iptables -t nat -A POSTROUTING -p icmp -s 192.168.0.0/24 -d 10.0.0.0/8 -j MASQUERADE

However, I think you like to make the server reachable from the client. In that case you might
need to put similar rules in the PREROUTING and use the DNAT with parameters insread of MASQUERADE