Am Mit, 2003-04-02 um 22.34 schrieb Mike: > I hate to ask but do you have and example of using iproute2 for IP address > aliases? ip addr add 192.168.7.55 dev eth0 ip addr add 192.168.7.56 dev eth0 But these are no aliases anymore. The notion of aliases has been dropped. But both addresses are bound to the interface. Cheers, Ralf > > Thanks, > Mike > ----- Original Message ----- > From: "Daniel Chemko" <dchemko@xxxxxxxxxx> > To: "Rob Sterenborg" <rob@xxxxxxxxxxxxxxx>; <netfilter@xxxxxxxxxxxxxxxxxxx> > Sent: Wednesday, April 02, 2003 2:53 PM > Subject: RE: sub interface filtering > > > Correct. Aliases are obsolete from what I can see. IProute2 adds IP > addresses directly to interfaces, so eth0 could have 10 IP addresses > instead of the awkward eth0:0 eth0:1, etc. mechanism. In this system, > you filter based on IP address instead of interface alias. > > -----Original Message----- > From: Rob Sterenborg [mailto:rob@xxxxxxxxxxxxxxx] > Sent: Wednesday, April 02, 2003 11:39 AM > To: netfilter@xxxxxxxxxxxxxxxxxxx > Subject: RE: sub interface filtering > > > Hi guys I have the following setup and rules. And I cant seem to get > the filtering to work. > > eth2:0 > > > > <routeable internetIP/28> > > > > eth2:1 > > > > <routeable internetIP/28> > > AFAIK it is because you cannot filter eth<x>:y (but you can filter the > IP address of course). > > > Rob > > > > -- Ralf Spenneberg RHCE, RHCX IPsec/PPTP Kernels for Red Hat Linux: http://www.spenneberg.com/.net/.org/.de Honeynet Project Mirror: http://honeynet.spenneberg.org Snort Mirror: http://snort.spenneberg.org