Eduardo Gargiulo <egargiulo@netscape.net> writes: > Yes, only eth1 is used for masquerading. May be aliasing is the best > solution. Can I use other ipchains rules with aliased interfaces > (eth1:0)? I've recently helped someone to setup such a configuration and yes, and seems to work. -- Florian Weimer Florian.Weimer@RUS.Uni-Stuttgart.DE University of Stuttgart http://cert.uni-stuttgart.de/ RUS-CERT +49-711-685-5973/fax +49-711-685-5898