# Q: how to route LAN hosts into retiolum?

  First select a host in the LAN that has access to retiolum, let's say the host at `$ROUTERIP`.
  On that host open the firewall and enable forwarding (example for IPv4, but IPv6 works similarly):
  
    iptables -A FORWARD -m state --state RELATED,ESTABLISHED -j ACCEPT
    iptables -A FORWARD -o lretiolum -j ACCEPT
    iptables -t nat -A POSTROUTING -o retiolum -j MASQUERADE
    echo 1 > /proc/sys/net/ipv4/ip_forward
    
  Then other hosts in the LAN can use `$ROUTERIP` to access retiolum by adding a route like this:
  
    ip route add 10.243.0.0/16 via $ROUTERIP