netfilter won't work with virtual interfaces, so I'm left trying to get
packets to flow between a public and a private network.
How would be a good way to assign multiple IP addresses to the same
interface and then have answers to those IP addresses be forwarded to
servers on a private network?
Here's an example:
Internet
|
eth0 (1.1.1.1/24)
|
netfilter Router
|
eth1 (192.168.1.1/24)
|
+------+-----------+-------------+
| | |
Web server 1 Web server 2 Web server 3
(192.168.1.2) (192.168.1.3) (192.168.1.4)
Where:
web server 1 has public IP 1.1.2.1/24
web server 2 has public IP 1.1.2.2/24
web server 3 has public IP 1.1.2.3/24
I've tried setting up static arp entries, but I'm having some
difficulties with routing, I think, since the web server's public IP's
are on a separate network than the firewall's Internet IP (1.1.2 instead
of 1.1.1).
Thanks for any suggestions,
Dave Boone
-----Original Message-----
From: netfilter-admin@lists.netfilter.org
[mailto:netfilter-admin@lists.netfilter.org] On Behalf Of Andy Meader
Sent: Friday, December 20, 2002 9:05 PM
To: David Boone
Cc: netfilter@lists.netfilter.org
Subject: Re: netfilter and multiple virtual interfaces
Hi Dave,
I know that on RH 7.1 that netfilter only sees an interface and its
multineted (virtual) interfaces as the same interface. Possibly newer
versions are different.
Good luck.
Andy
On Fri, 20 Dec 2002, David Boone wrote:
> Hi,
>
> I know you can apply a + (plus sign) to adapters in the form eth+ or
> ppp+, but I'm setting up a firewall that will have several web servers
> behind it and I would like to do something like eth0+ and/or eth0:+ in
> the rules. Does anyone know if this will work or do I have to enter
> every single virtual adapter by hand?
>
> Thanks,
> Dave Boone
>
>
>
