[Techtalk] problem with wireless/LAN router

[Carla Schroder]

This is my Week of Things Not Working. After overhauling my router/WAP, I have 
internet for all LAN hosts, but they cannot see each other.

On my home network I had a separate wireless access point and router, like 
this:

dsl modem -> switch ->|Linux router
                                   |Linux WAP
                                   |LAN hosts
                                   |
                                   |

Which worked just fine. Then I decided to consolidate the WAP and router into 
one. Which I have done often, but I'm missing something because it's not 
working. It's set up like this:

LAN IP = 192.168.1.25
br0 = ath0 bridged to eth0

WAN IP = 22.33.44.55
eth1

I have forwarding enabled in sysctl.conf:
net.ipv4.ip_forward = 1

iptables has these rules:

#Enable unrestricted outgoing traffic, incoming
#is restricted to locally-initiated sessions only
$ipt -A INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT
$ipt -A FORWARD -i $WAN_IFACE -o $LAN_IFACE -m state --state 
ESTABLISHED,RELATED -j ACCEPT
$ipt -A FORWARD -i $LAN_IFACE -o $WAN_IFACE -m state --state 
NEW,ESTABLISHED,RELATED -j ACCEPT

Same old rules I always use, and yes I changed $LAN_IFACE to br0. Wired and 
wireless clients all get Internet and DHCP/DNS from the router. But they 
don't see each other.

Hints? Answers? Huge wads of cash so I can retire and not worry about this 
stuff?

-- 
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Carla Schroder
Linux geek and random computer tamer
check out my Linux Cookbook! 
http://www.oreilly.com/catalog/linuxckbk/
best book for sysadmins and power users
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~