You have three interfaces on the same 192.168.0.0/24. Why? On Fri, Oct 31, 2003 at 09:49:37AM -0500, David C. Hart wrote: > I can't figure this out. > > Our server has three internal IP addresses on two interfaces. So we have > eth0, eth0:1 and eth1. > > "Oct 31 09:24:47 mail2 kernel: FIREWALLED: IN=eth1 OUT= > MAC=00:09:5b:22:29:d1:00:06:25:e4:ed:a3:08:00 SRC=217.97.25.71 DST=192. > 168.0.5 LEN=404 TOS=0x00 PREC=0x00 TTL=111 ID=40607 PROTO=UDP SPT=6022 > DPT=1434 LEN=384" > > In this case, destination 192.168.0.5 is on eth0:1. Yet it shows as eth1 > with the eth1 MAC. This connections was NATed through the router so it > never hit the eth1 interface. Here's part of the ifconfig. > > eth0 Link encap:Ethernet HWaddr 00:50:04:65:E3:1B > inet addr:192.168.0.31 Bcast:192.168.0.255 > Mask:255.255.255.0 > > eth0:1 Link encap:Ethernet HWaddr 00:50:04:65:E3:1B > inet addr:192.168.0.5 Bcast:192.168.0.255 Mask:255.255.255.0 > > eth1 Link encap:Ethernet HWaddr 00:09:5B:22:29:D1 > inet addr:192.168.0.32 Bcast:192.168.0.255 > Mask:255.255.255.0 >