On Thursday 22 April 2004 13:12, Antony Stone wrote: > On Thursday 22 April 2004 12:30 pm, Fisher Alex wrote: > > I have two sets of systems. Each system has about 30 IP addresses > > spread across various bits of hardware. The two systems are > > identical (ie have the same 30 IP addresses). The addresses are all > > part of the class C subnet 192.168.0.* > However, if someone is adamant that you need to set up network > connectivity between machines with such an unfriendly combination of IP > addresses, I suggest you simply set up multiple host-specific routes on > the netflter machine, telling it where to find each different > 192.168.0.* destination address, and don't have a standard > 192.168.0.0/24 route on that system. >From what I understand of the question both system 1 and system 2 have the same pool of 192.168.x.x addresses, such as in a failover setup. Surely then this still would not work, as each would have two host-specific routes and the kernel chooses the first one it gets to in the routing table. That's not a netfilter issue though, it's a routing one and what to do would depend on whether you want fail over, load balancing across the two systems, etc. Whether or not that's the right way to go about doing it, I don't know. David