From: Aleksandar Milivojevic <amilivojevic@pbl.ca>
To: Faisal <faisal@clickonlinenetworks.com>
Cc: netfilter@lists.netfilter.org
Subject: Re: having more then 1 external interfaces ?
Date: Mon, 18 Oct 2004 10:39:09 -0500 [thread overview]
Message-ID: <4173E39D.5000306@pbl.ca> (raw)
In-Reply-To: <000201c4b4ae$e065e5a0$0300000a@serverxxx>
Faisal wrote:
> is it possible in iptables to have more then 1 external interfaces ?
Short answer. Yes.
Longer answer. Netfilter do not have notition of external or internal
interface. They are all the same. You build firewall rules according
to which interfaces you consider as internal, external, and what kind of
traffic are you going to allow on them. If you want, you might be just
as restrictive on internal interfaces as on external.
If you are using some software that generates firewall rules for you,
than that software might have limitation of allowing you to tag only one
interface as external. Again, this is not limitation imposed by
Netfilter. For Netfilter, there's no such thing as internal or external
interface. Netfilter knows only about "interfaces", it doesn't know
what you consider them to be.
--
Aleksandar Milivojevic <amilivojevic@pbl.ca> Pollard Banknote Limited
Systems Administrator 1499 Buffalo Place
Tel: (204) 474-2323 ext 276 Winnipeg, MB R3T 1L7
next prev parent reply other threads:[~2004-10-18 15:39 UTC|newest]
Thread overview: 6+ messages / expand[flat|nested] mbox.gz Atom feed top
2004-10-07 16:46 [ADMIN] netfilter.org CVS now converted to subversion Harald Welte
2004-10-17 23:25 ` Henrik Nordstrom
2004-10-17 23:39 ` Harald Welte
2004-10-18 1:07 ` having more then 1 external interfaces ? Faisal
2004-10-18 15:39 ` Aleksandar Milivojevic [this message]
2004-10-18 18:14 ` Jose Maria Lopez
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=4173E39D.5000306@pbl.ca \
--to=amilivojevic@pbl.ca \
--cc=faisal@clickonlinenetworks.com \
--cc=netfilter@lists.netfilter.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.