Shorewall users - Apr 2007 - redirect all traffic to net_addr1 to net_addr2

Hi all,

I have a setup with some zones : net, loc, vpn1(ipsec) , where each zone 
have the following address spaces

"my firewall"
    net : 200.200.200.0/24
    loc : 192.168.1.0/24
    vpn1: 10.10.50.0/23

"my firewall" there is
    default route to net
    route to vpn1 when dst = 10.10.50.0/23

"vpn1 site" there is
    default route to net
    route to my site when dst = 200.200.200.0/24

my initial need is :
someone on "vpn1 site" can access an IP on NET throw "my
firewall" (I
know this is not possible because default route on "vpn1 site"
don''t
point to "my firewall" .

my second idea :

someone on "vpn1 site" can access an IP on
"200.200.200.X/24" ,
redirect(NAT I presume) all traffic that  came to this IP to NET throw 
"my firewall" . Problem : I don''t know how to do this.

So I need some help to setup this or some ideas to solve the problem 
before my boss came back.


Christian
IT Manager - PolibrasNET




-------------------------------------------------------------------------
This SF.net email is sponsored by DB2 Express
Download DB2 Express C - the FREE version of DB2 express and take
control of your XML. No limits. Just data. Click to get it now.
http://sourceforge.net/powerbar/db2/