Multiple DHCP'd addresses on one NIC

[Alexander Dalloz]

Am Sa, den 12.03.2005 schrieb Aaron O'Hara um 1:02:

> Is there any way to provide firewall services on aliased devices?
> 
> -- Aaron

Only by using the IPs instead of aliased device names. Example:

not possible:
iptables -A INPUT -i eth0:1 --dport ssh -j ACCEPT

possible:
iptables -A INPUT -d 123.123.123.4 --dport ssh -j ACCEPT

while eth0:0 has IP 123.123.123.4.

Alexander


-- 
Alexander Dalloz | Enger, Germany | GPG http://pgp.mit.edu 0xB366A773
legal statement: http://www.uni-x.org/legal.html
Fedora Core 2 GNU/Linux on Athlon with kernel 2.6.10-1.770_FC2smp 
Serendipity 01:02:55 up 2 days, 5:14, load average: 0.16, 0.32, 0.44 
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 189 bytes
Desc: Dies ist ein digital signierter Nachrichtenteil
URL: <http://listman.redhat.com/archives/fedora-list/attachments/20050312/d1de1075/attachment-0001.sig>