On Thu, Apr 07, 2005 at 04:15:19PM +0200, Werner.Beck@xxxxxxx wrote: > Is it normal that the eth0.3 answers even if it doesn't belong to > that VLAN 2 (in this case I have to use iptables)? Correct. If the packet is accepted through the INPUT iptables chain and destination is a local address, Linux will respond to it regardless of the interface it arrived on. Possibly rp_filter can help with this, or, as you said, a few iptables rules. //Peter
