On Fri, 2012-01-20 at 15:46 -0200, Usuário do Sistema wrote: > so... I wonder if is very bad or what can happen when I do alias on a > interface for more the one network. for exemplo: ... > I wish drop any packages between theses network. any traffic between > the network 172.16.30.0/30 and 172.16.30.4/30 must dropped by > iptables. That sounds a bit messy, and I don't even know if it's possible. Why not just use multiple physical network interfaces? Even if you got it working, if the computers on the 2 separate networks had their netmask incorrectly configured, then you'd get traffic passing directly between them without even going to the Linux box. Andy -- To unsubscribe from this list: send the line "unsubscribe netfilter" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
