I hate to ask but do you have and example of using iproute2 for IP address aliases? Thanks, Mike ----- Original Message ----- From: "Daniel Chemko" <dchemko@xxxxxxxxxx> To: "Rob Sterenborg" <rob@xxxxxxxxxxxxxxx>; <netfilter@xxxxxxxxxxxxxxxxxxx> Sent: Wednesday, April 02, 2003 2:53 PM Subject: RE: sub interface filtering Correct. Aliases are obsolete from what I can see. IProute2 adds IP addresses directly to interfaces, so eth0 could have 10 IP addresses instead of the awkward eth0:0 eth0:1, etc. mechanism. In this system, you filter based on IP address instead of interface alias. -----Original Message----- From: Rob Sterenborg [mailto:rob@xxxxxxxxxxxxxxx] Sent: Wednesday, April 02, 2003 11:39 AM To: netfilter@xxxxxxxxxxxxxxxxxxx Subject: RE: sub interface filtering > Hi guys I have the following setup and rules. And I cant seem to get the filtering to work. > eth2:0 > > <routeable internetIP/28> > > eth2:1 > > <routeable internetIP/28> AFAIK it is because you cannot filter eth<x>:y (but you can filter the IP address of course). Rob