Thank you Andy, Why not just use multiple physical network interfaces? because shortage of interfaces physical. Em 1 de fevereiro de 2012 17:08, Andrew Beverley <andy@xxxxxxxxxxx> escreveu: > On Fri, 2012-01-20 at 15:46 -0200, Usuário do Sistema wrote: >> so... I wonder if is very bad or what can happen when I do alias on a >> interface for more the one network. for exemplo: > ... >> I wish drop any packages between theses network. any traffic between >> the network 172.16.30.0/30 and 172.16.30.4/30 must dropped by >> iptables. > > That sounds a bit messy, and I don't even know if it's possible. Why not > just use multiple physical network interfaces? > > Even if you got it working, if the computers on the 2 separate networks > had their netmask incorrectly configured, then you'd get traffic passing > directly between them without even going to the Linux box. > > Andy > > -- To unsubscribe from this list: send the line "unsubscribe netfilter" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
