problems with alias

problems with alias

[Batstru]

[-- Attachment #1: Type: text/plain, Size: 1099 bytes --]

Hi all!
I changed my server running redhat9 (kernel 2.4.x) with a new one with
fedora core 2 (kernel 2.6.x): each one has  2 ethernet interfaces, so I copy
network configuration fron rh9 to fc2 

eth0 --> 192.168.1.254 / 255.255.255.0
eth1 --> 82.186.92.90 / 255.255.255.254
eth1:1 --> 82.186.92.91 / 255.255.255.254
eth1:2 --> 82.186.92.92 / 255.255.255.254
eth1:3 --> 82.186.92.93 / 255.255.255.254
eth1:4 --> 82.186.92.93 / 255.255.255.254
also, I copy and apply iptables configuration but it does not work well.
now iptables doesn\'t apply rules to virtual interfaces, eth1...eth4.
a line of my configiguration files is:
-A INPUT -p tcp -m tcp -m state -d 82.186.92.91 --dport 20 --state NEW -j
ACCEPT
I tried different rules configuration but it still not work.

can you help me? 
 --
 Email.it, the professional e-mail, gratis per te: http://www.email.it/f
 
 Sponsor:
 Lerboristeria.biz: per la tua bellezza e salute il miglior assortimento 
di prodotti erboristici ed oggettistica online

 Clicca qui: http://adv.email.it/cgi-bin/foclick.cgi?mid=2152&d=20040716


[-- Attachment #2: Type: text/html, Size: 1355 bytes --]

Re: problems with alias

[Antony Stone]

On Friday 16 July 2004 11:00 am, Batstru wrote:

> Hi all!
> I changed my server running redhat9 (kernel 2.4.x) with a new one with
> fedora core 2 (kernel 2.6.x): each one has  2 ethernet interfaces, so I
> copy network configuration fron rh9 to fc2
>
> eth0 --> 192.168.1.254 / 255.255.255.0
> eth1 --> 82.186.92.90 / 255.255.255.254
> eth1:1 --> 82.186.92.91 / 255.255.255.254
> eth1:2 --> 82.186.92.92 / 255.255.255.254
> eth1:3 --> 82.186.92.93 / 255.255.255.254
> eth1:4 --> 82.186.92.93 / 255.255.255.254

These combinations of address/netmask make no sense to me.

The netmask 255.255.255.254 defines a 2-host subnet (basically, a 
point-to-point link, although those are normally specified using a full 
32-bit all-1's netmask).   Therefore if you have 82.186.92.90 on an interface 
with a 255.255.255.254 netmask, the only machine it will be capable of 
talking to at the other end of the cable is 82.186.92.91.

Putting that address (.91), as well as several others which fall in different 
address ranges, onto the same phyical interface makes no sense to me.

Regards,

Antony.

-- 
Anyone that's normal doesn't really achieve much.

 - Mark Blair, Australian rocket engineer

                                                     Please reply to the list;
                                                           please don't CC me.

Re: problems with alias

[George Alexandru Dragoi]

Define "not work", give some error messages, what you expect and what you get


----- Original Message -----
From: Batstru <batstru@email.it>
Date: Fri, 16 Jul 2004 12:00:02 +0200
Subject: problems with alias
To: netfilter@lists.netfilter.org



Hi all!


I changed my server running redhat9 (kernel 2.4.x) with a new one with
fedora core 2 (kernel 2.6.x): each one has  2 ethernet interfaces, so
I copy network configuration fron rh9 to fc2



eth0 --> 192.168.1.254 / 255.255.255.0
eth1 --> 82.186.92.90 / 255.255.255.254
eth1:1 --> 82.186.92.91 / 255.255.255.254
eth1:2 --> 82.186.92.92 / 255.255.255.254
eth1:3 --> 82.186.92.93 / 255.255.255.254
eth1:4 --> 82.186.92.93 / 255.255.255.254


also, I copy and apply iptables configuration but it does not work well.


now iptables doesn't apply rules to virtual interfaces, eth1...eth4.


a line of my configiguration files is:
-A INPUT -p tcp -m tcp -m state -d 82.186.92.91 --dport 20 --state NEW -j ACCEPT


I tried different rules configuration but it still not work.



can you help me?


----

 Email.it, the professional e-mail, gratis per te: clicca qui 

 

 Sponsor:

 Lerboristeria.biz: per la tua bellezza e salute il miglior assortimento 
di prodotti erboristici ed oggettistica online


 Clicca qui

Re: problems with alias

[Batstru]

[-- Attachment #1: Type: text/plain, Size: 2084 bytes --]

sorry.. 
the correct subnet mask is the following...

eth0 --> 192.168.1.254 / 255.255.255.0
eth1 --> 82.186.92.90 / 255.255.255.248
eth1:1 --> 82.186.92.91 / 255.255.255.248
eth1:2 --> 82.186.92.92 / 255.255.255.248
eth1:3 --> 82.186.92.93 / 255.255.255.248
eth1:4 --> 82.186.92.93 / 255.255.255.248

marco


--------- Original Message --------
Da: netfilter@lists.netfilter.org
To: \"netfilter@lists.netfilter.org\" <netfilter@lists.netfilter.org>
Oggetto: Re: problems with alias
Data: 16/07/04 12:48



On Friday 16 July 2004 11:00 am, Batstru wrote:

> Hi all!
> I changed my server running redhat9 (kernel 2.4.x) with a new one with
> fedora core 2 (kernel 2.6.x): each one has 2 ethernet interfaces, so I
> copy network configuration fron rh9 to fc2
>
> eth0 --> 192.168.1.254 / 255.255.255.0
> eth1 --> 82.186.92.90 / 255.255.255.254
> eth1:1 --> 82.186.92.91 / 255.255.255.254
> eth1:2 --> 82.186.92.92 / 255.255.255.254
> eth1:3 --> 82.186.92.93 / 255.255.255.254
> eth1:4 --> 82.186.92.93 / 255.255.255.254

These combinations of address/netmask make no sense to me.

The netmask 255.255.255.254 defines a 2-host subnet (basically, a 
point-to-point link, although those are normally specified using a full 
32-bit all-1\'s netmask). Therefore if you have 82.186.92.90 on an interface

with a 255.255.255.254 netmask, the only machine it will be capable of 
talking to at the other end of the cable is 82.186.92.91.

Putting that address (.91), as well as several others which fall in
different 
address ranges, onto the same phyical interface makes no sense to me.

Regards,

Antony.

-- 
Anyone that\'s normal doesn\'t really achieve much.

- Mark Blair, Australian rocket engineer

Please reply to the list;
please don\'t CC me. 
 --
 Email.it, the professional e-mail, gratis per te: http://www.email.it/f
 
 Sponsor:
 I migliori vini a prezzi imbattibili e per ogni acquisto speciali omaggi!
Clicca e prova la convenienza ora!
 Clicca qui: http://adv.email.it/cgi-bin/foclick.cgi?mid=2624&d=20040716


[-- Attachment #2: Type: text/html, Size: 2695 bytes --]

Re: problems with alias

[Jamie Pratt]

Batstru wrote:

> Hi all!
> I changed my server running redhat9 (kernel 2.4.x) with a new one with
> fedora core 2 (kernel 2.6.x): each one has  2 ethernet interfaces, so I copy
> network configuration fron rh9 to fc2 
> 
> eth0 --> 192.168.1.254 / 255.255.255.0
> eth1 --> 82.186.92.90 / 255.255.255.254
> eth1:1 --> 82.186.92.91 / 255.255.255.254
> eth1:2 --> 82.186.92.92 / 255.255.255.254
> eth1:3 --> 82.186.92.93 / 255.255.255.254
> eth1:4 --> 82.186.92.93 / 255.255.255.254
> also, I copy and apply iptables configuration but it does not work well.
> now iptables doesn\'t apply rules to virtual interfaces, eth1...eth4.
> a line of my configiguration files is:
> -A INPUT -p tcp -m tcp -m state -d 82.186.92.91 --dport 20 --state NEW -j
> ACCEPT
> I tried different rules configuration but it still not work.
> 
> can you help me? 
>  --
>  Email.it, the professional e-mail, gratis per te: http://www.email.it/f
>  
>  Sponsor:
>  Lerboristeria.biz: per la tua bellezza e salute il miglior assortimento 
> di prodotti erboristici ed oggettistica online
> 
>  Clicca qui: http://adv.email.it/cgi-bin/foclick.cgi?mid=2152&d=20040716
> 
> 

Have you tried to use the iproute2 suite for aliasing instead of 
ifconfig? I believe the ifconfig way is considered "deprecated". Then, 
specify your rules by interface and/or ip and it should work properly - 
maybe the old method only works in iptables using the interface name now?

example:

## old ip aliasing
##/sbin/ifconfig eth0:0 192.168.0.1
##/sbin/ifconfig eth0:1 192.168.0.2

## New IP aliasing using ip tool from iproute2 package:
/sbin/ip addr add 192.168.0.1/24 brd + dev eth0
/sbin/ip addr add 192.168.0.2/24 brd + dev eth0

regards,
jamie