Linux Netfilter discussions
 help / color / mirror / Atom feed
From: Raymond Leach <raymondl@knowledgefactory.co.za>
To: Steve M Bibayoff <smb23@csufresno.edu>
Cc: Netfilter Mailing List <netfilter@lists.netfilter.org>
Subject: Re: Using an device alias?
Date: 06 Jan 2003 07:30:32 +0200	[thread overview]
Message-ID: <1041831032.5194.21.camel@rayw.knowledgefactory.co.za> (raw)
In-Reply-To: <b74ecb8788.b8788b74ec@cvip.net>

[-- Attachment #1: Type: text/plain, Size: 1660 bytes --]

Hi

It doesn't make sense to attach rules to alias interfaces, since the
packets are coming in the same physical interface whether it is eth0:1
or eth0.

So if you use just eth0 your rules should work as expected as long as
you qualify them further with the correct (alias)ip.

Ray

On Fri, 2003-01-03 at 21:28, Steve M Bibayoff wrote:
> Sorry if everyone gets this twice, this one is a
> second posting when I realized this was a closed list.
> 
> Original question:
> Is it possible to use iptables with a device alias
> (ex.. eth0:1)? I tries to add a filter rule and got
> an error:
> % iptables -t filter -I INPUT -i eth0:1 -j ACCEPT
> Warning: wierd character in interface `eth0:1' (No
> aliases, :, ! or *).
> 
> If i list the rules, it's listed, but it doesn't
> appear to be working. I was wondering if someone had
> a definite answer.
> 
> TIA
> 
> Steve
> 
-- 
 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
(  Raymond Leach                       )
 ) Knowledge Factory                  (
(                                      )
 ) Tel: +27 11 445 8100               (
(  Fax: +27 11 445 8101                )
 )                                    (
(  http://www.knowledgefactory.co.za/  )
 ) http://www.saptg.co.za/            (
 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
   o                                o
    o                              o
        .--.                  .--.
       | o_o|                |o_o |
       | \_:|                |:_/ |
      / /   \\              //   \ \
     ( |     |)            (|     | )
     /`\_   _/'\          /'\_   _/`\
     \___)=(___/          \___)=(___/

[-- Attachment #2: This is a digitally signed message part --]
[-- Type: application/pgp-signature, Size: 189 bytes --]

  parent reply	other threads:[~2003-01-06  5:30 UTC|newest]

Thread overview: 7+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2003-01-03 19:28 Using an device alias? Steve M Bibayoff
2003-01-04  3:33 ` Joel Newkirk
     [not found]   ` <3E19CD4E.2050700@csufresno.edu>
     [not found]     ` <3E19DD6B.7070503@csufresno.edu>
2003-01-06 19:56       ` Steve
2003-01-06 21:41         ` Joel Newkirk
2003-01-06  5:30 ` Raymond Leach [this message]
2003-01-07 17:23 ` WA Support
  -- strict thread matches above, loose matches on Subject: below --
2003-01-03 19:07 Steve M Bibayoff

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=1041831032.5194.21.camel@rayw.knowledgefactory.co.za \
    --to=raymondl@knowledgefactory.co.za \
    --cc=netfilter@lists.netfilter.org \
    --cc=smb23@csufresno.edu \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox