спасибо за подсказку.
[sudo] password for media:
# Generated by iptables-save v1.4.4 on Sun Aug 21 20:09:51 2011
*nat
:PREROUTING ACCEPT [537:43231]
:OUTPUT ACCEPT [7835:472666]
:POSTROUTING ACCEPT [7835:472666]
-A POSTROUTING -s 10.8.0.0/24 -j MASQUERADE
COMMIT
# Completed on Sun Aug 21 20:09:51 2011
# Generated by iptables-save v1.4.4 on Sun Aug 21 20:09:51 2011
*filter
:INPUT ACCEPT [9523:731985]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [24981:2924015]
-A FORWARD -p tcp -m tcp --tcp-flags SYN,RST SYN -j TCPMSS --clamp-mss-to-pmtu
COMMIT
# Completed on Sun Aug 21 20:09:51 2011
media@media-server:~$ sudo iptables -t nat -nvL
Chain PREROUTING (policy ACCEPT 575 packets, 46585 bytes)
pkts bytes target prot opt in out source destination
Chain OUTPUT (policy ACCEPT 8067 packets, 487K bytes)
pkts bytes target prot opt in out source destination
Chain POSTROUTING (policy ACCEPT 8067 packets, 487K bytes)
pkts bytes target prot opt in out source destination
0 0 MASQUERADE all -- * * 10.8.0.0/24 0.0.0.0/0
media@media-server:~$ cat /etc/network/interfaces
# This file describes the network interfaces available on your system
# and how to activate them. For more information, see interfaces(5).
# The loopback network interface
auto lo
iface lo inet loopback
# The primary network interface
auto eth0
iface eth0 inet static
address 192.168.1.3
netmask 255.255.255.0
network 192.168.1.0
broadcast 192.168.1.255
gateway 192.168.1.1
# dns-* options are implemented by the resolvconf package, if installed
dns-nameservers 192.168.1.1
auto wlan0
iface wlan0 inet static
address 192.168.10.1
netmask 255.255.255.0
up ip link set $IFACE promisc on
down ip link set $IFACE promisc off
media@media-server:~$ grep -v '^#\|^$' /etc/dnsmasq.conf
interface=wlan0
listen-address=192.168.10.1
bind-interfaces
domain=media-server.lan
dhcp-range=192.168.10.20,192.168.10.50,255.255.255.0,24h
dhcp-option=3,192.168.10.1
media@media-server:~$ ifconfig -a
eth0 Link encap:Ethernet HWaddr 00:27:0e:04:c9:ec
inet addr:192.168.1.3 Bcast:192.168.1.255 Mask:255.255.255.0
inet6 addr: fe80::227:eff:fe04:c9ec/64 Scope:Link
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:6946 errors:0 dropped:0 overruns:0 frame:0
TX packets:27243 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:762234 (762.2 KB) TX bytes:4802699 (4.8 MB)
Interrupt:28 Base address:0xc000
lo Link encap:Локальная петля (Loopback)
inet addr:127.0.0.1 Mask:255.0.0.0
inet6 addr: ::1/128 Scope:Host
UP LOOPBACK RUNNING MTU:16436 Metric:1
RX packets:6527 errors:0 dropped:0 overruns:0 frame:0
TX packets:6527 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:0
RX bytes:401028 (401.0 KB) TX bytes:401028 (401.0 KB)
mon.wlan0 Link encap:UNSPEC HWaddr 54-E6-FC-D1-C2-9E-00-00-00-00-00-00-00-00-00-00
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:1585 errors:0 dropped:0 overruns:0 frame:0
TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:248235 (248.2 KB) TX bytes:0 (0.0 B)
wlan0 Link encap:Ethernet HWaddr 54:e6:fc:d1:c2:9e
inet addr:192.168.10.1 Bcast:192.168.10.255 Mask:255.255.255.0
inet6 addr: fe80::56e6:fcff:fed1:c29e/64 Scope:Link
UP BROADCAST RUNNING PROMISC MULTICAST MTU:1500 Metric:1
RX packets:0 errors:0 dropped:0 overruns:0 frame:0
TX packets:57 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:0 (0.0 B) TX bytes:6430 (6.4 KB)
media@media-server:~$ route -n
Таблица маршутизации ядра протокола IP
Destination Gateway Genmask Flags Metric Ref Use Iface
192.168.1.0 0.0.0.0 255.255.255.0 U 0 0 0 eth0
192.168.10.0 0.0.0.0 255.255.255.0 U 0 0 0 wlan0
0.0.0.0 192.168.1.1 0.0.0.0 UG 100 0 0 eth0
media@media-server:~$ cat /proc/sys/net/ipv4/ip_forward
1
media@media-server:~$ arp -n -i eth0
Адрес HW-тип HW-адрес Флаги Маска Интерфейс
192.168.1.1 ether 00:1f:c6:30:5e:48 C eth0
192.168.1.2 ether 00:1e:c2:9f:10:5d C eth0