Re: sub interface filtering

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Am Mit, 2003-04-02 um 22.34 schrieb Mike:
> I hate to ask but do you have and example of using iproute2 for IP address
> aliases?
ip addr add 192.168.7.55 dev eth0
ip addr add 192.168.7.56 dev eth0

But these are no aliases anymore. The notion of aliases has been
dropped. But both addresses are bound to the interface.

Cheers,

Ralf
> 
> Thanks,
> Mike
> ----- Original Message -----
> From: "Daniel Chemko" <dchemko@xxxxxxxxxx>
> To: "Rob Sterenborg" <rob@xxxxxxxxxxxxxxx>; <netfilter@xxxxxxxxxxxxxxxxxxx>
> Sent: Wednesday, April 02, 2003 2:53 PM
> Subject: RE: sub interface filtering
> 
> 
> Correct. Aliases are obsolete from what I can see. IProute2 adds IP
> addresses directly to interfaces, so eth0 could have 10 IP addresses
> instead of the awkward eth0:0 eth0:1, etc. mechanism. In this system,
> you filter based on IP address instead of interface alias.
> 
> -----Original Message-----
> From: Rob Sterenborg [mailto:rob@xxxxxxxxxxxxxxx]
> Sent: Wednesday, April 02, 2003 11:39 AM
> To: netfilter@xxxxxxxxxxxxxxxxxxx
> Subject: RE: sub interface filtering
> 
> > Hi guys I have the following setup and rules. And I cant seem to get
> the filtering to work.
> > eth2:0
> >
> > <routeable internetIP/28>
> >
> > eth2:1
> >
> > <routeable internetIP/28>
> 
> AFAIK it is because you cannot filter eth<x>:y (but you can filter the
> IP address of course).
> 
> 
> Rob
> 
> 
> 
> 
-- 
Ralf Spenneberg
RHCE, RHCX

IPsec/PPTP Kernels for Red Hat Linux:  
http://www.spenneberg.com/.net/.org/.de
Honeynet Project Mirror:                http://honeynet.spenneberg.org
Snort Mirror:                           http://snort.spenneberg.org


[Index of Archives]     [Linux Netfilter Development]     [Linux Kernel Networking Development]     [Netem]     [Berkeley Packet Filter]     [Linux Kernel Development]     [Advanced Routing & Traffice Control]     [Bugtraq]

  Powered by Linux