[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: ipchains question



Lars Hallberg wrote:
> But this is TWO Ethernet cards (eth0 & eth1). I might have missed
> the point of the (eth1:0 Real_IP3) interface, but is not the other
> one (eth1 Internal_IP1) suposed to be used for Masquerade?
> 
> /Lars
> 
> --
> Lars Hallberg                         Micro++  www.micropp.se/
> Freeware * C/C++ * Python * Linux * Debian * HTML * Javascript
> 
> --
> To UNSUBSCRIBE, email to debian-firewall-request@lists.debian.org
> with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org

Yes, only eth1 is used for masquerading. May be aliasing is the best
solution. Can I use other ipchains rules with aliased interfaces
(eth1:0)?

# ipchains -A forward -i eth1:0 -d $REAL_IP/32 23 -y -l -j REJECT

-- 
:%s/Micros~1/GNU\/Linux/g^M
:wq!



Reply to: