On 2011-07-28 14:00, Pandu Poluan wrote: > How does the routing work? I.e., when does a packet exits through eth0 > or eth0:1 or eth0:2? Pandu, eth0 and eth0:1 are the same interface. The :1 suffix is just an alias associated with a secondary IP address. There is no difference internally. If you want to behave differently based on different aliases, you must define rules by IP. Regards, Tyler -- "A human being should be able to change a diaper, plan an invasion, butcher a hog, conn a ship, design a building, write a sonnet, balance accounts, build a wall, set a bone, comfort the dying, take orders, give orders, cooperate, act alone, solve equations, analyze a new problem, pitch manure, program a computer, cook a tasty meal, fight efficiently, die gallantly. Specialization is for insects." -- Lazarus Long, "Time Enough for Love", by Robert A. Heinlein -- To unsubscribe from this list: send the line "unsubscribe netfilter" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html