RE: IP Alias with iptables

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Le lun 19/04/2004 à 18:07, Rodrigo Haces a écrit :
> Ok, this is what i want, i have a Restaurant, and have an administrative
> network (192.168.1.0) and i am giving wireless access to my clients, but i
> cant let them get into my administrative network, so i set them 192.168.0.0.

Then aliases are not secure enough to deal with your settings. I mean
any wireless client that would change its IP manually to 192.160.1.0
will get administrative network priviliedges. You have to separate
thoses two LANs physically using a second network adapter or use a VLAN
aware switch connected by a trunk to eth0, configured to support 802.1q
tagging.

-- 
http://www.netexit.com/~sid/
PGP KeyID: 157E98EE FingerPrint: FA62226DA9E72FA8AECAA240008B480E157E98EE
>> Hi! I'm your friendly neighbourhood signature virus.
>> Copy me to your signature file and help me spread!



[Index of Archives]     [Linux Netfilter Development]     [Linux Kernel Networking Development]     [Netem]     [Berkeley Packet Filter]     [Linux Kernel Development]     [Advanced Routing & Traffice Control]     [Bugtraq]

  Powered by Linux