Oscar N wrote:
Are the interfaces saved in any way in a session or is it only ip src, dst and ports that are saved and matched against? Why I ask is because what happens if I configure a linuxbox as two virtual firewall with same nets being used on different vlans. Will all the sessions be separate or will they sometimes "merge" if it happens to be the same IPs and ports in two sessions.
Interfaces are not used, not in this sense. In fact, this is a feature. It allows asymetric routing, where packets go out through one interface and the return packets arrive at a different interface.
I would use two physical or virtual machines, as the risk you describe is real, if remote.
HTH, M4 - To unsubscribe from this list: send the line "unsubscribe netfilter" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
