Take the 2-minute tour ×
Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

I do the IT work for the church I attend. There are about 30 computers behind a router flashed with DD-WRT. I have it set to use the OpenDNS service mainly for content filtering. Adult content needs to be blocked for all computers, but only as select few need sites like Facebook, Youtube, etc... blocked.

How can I set up DD-WRT to basically segment the computers? We have 5 external IPs, so if I could get DD-WRT to send traffic over 1 IP for most, and another IP for the rest, I could easily set up OpenDNS to block what is appropriate for each network.

share|improve this question

1 Answer 1

up vote 1 down vote accepted
+50

The term in this case is "One-to-one NAT". This dd-wrt.com article describes it as :

One-to-one NAT (aka Static NAT) is a way to make systems behind a firewall and configured with private IP addresses appear to have public IP addresses.

The above article describes with examples how to setup new public static IP on dd-wrt WAN interface, then use firewall rules to NAT these external IPs to your internal IPs. This will involve making static all internal addresses.

Some user-cases can be found in thread multiple external IP addresses.

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.