Le jeu 12/02/2004 à 18:29, giovanni costagliola a écrit : > I've set up a star firewall with 3 physical NIC. I've configured two oh them > with multi-ip assignement. > let's go to the core of the problem. it seems that the iface identified by > eth0_1, eth0_0 are not recognized by iptables. Aliases are not interfaces, they're just another IP for an interface answers ARP requests. That's why eth0:0, eth0:1, etc. usage is deprecated. Netfilter matches interfaces, real ones. So you can't match aliases with. You'll have to use affected IP addresses and interface (i.e. eth0). -- http://www.netexit.com/~sid/ PGP KeyID: 157E98EE FingerPrint: FA62226DA9E72FA8AECAA240008B480E157E98EE >> Hi! I'm your friendly neighbourhood signature virus. >> Copy me to your signature file and help me spread!