Re: IP Alias with iptables

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On April 19, 2004 03:25 pm, Antony Stone wrote:
> On Monday 19 April 2004 5:07 pm, Rodrigo Haces wrote:
> > > > I have only one network adapter in my Server, but i need to have 2
> > > > different networks, 192.168.1.0 to the MAC addresses i know and
> > > > 192.168.0.0 to the MAC addresses i don't know
> > >
< < Much snippage for brevity >>


> on which network range you want to do what.
>
> > > > if not, is there a way to create an eth0 and eth1 witn the same
> > > > adapter?
> > >
> > > No.   It's a simple (and cheap) job to add another ethernet card,
> > > though.
> >
> > No PCI slots available... :(
>
> I suggest another firewall then - trying to set up a firewall with only one
> ethernet interface is a poor enough solution (from a security point of
> view) in the first place, but if there is wireless access involved as well
> then I would not even consider it.
>
>
	Thanks Antony  -- again you have expressed precisely what I would have said 
-- succinctly and clearly.

	Aliased (stacked) interfaces ARE NOT SECURE.  Period.

	(And Hubs don't help)

	Alistair Tonner


 Regards,
>
> Antony.


[Index of Archives]     [Linux Netfilter Development]     [Linux Kernel Networking Development]     [Netem]     [Berkeley Packet Filter]     [Linux Kernel Development]     [Advanced Routing & Traffice Control]     [Bugtraq]

  Powered by Linux