Linux Netfilter discussions
 help / color / mirror / Atom feed
From: "Dick St.Peters" <stpeters@NetHeaven.com>
To: netfilter@lists.netfilter.org
Subject: Re: Help with alias interfaces
Date: Wed, 23 Jun 2004 16:30:46 -0400	[thread overview]
Message-ID: <16601.59510.845588.723249@saint.heaven.net> (raw)
In-Reply-To: <200406232022.46362.Antony@Soft-Solutions.co.uk>

Antony Stone writes:

> On Wednesday 23 June 2004 8:01 pm, Dick St.Peters wrote:
> 
> > Antony Stone writes:
> > > The deprecated way to get multiple IPs results in pseudo-interface names
> > > such as eth1:0, eth1:1 etc as you discussed.
> >
> > Deprecated by whom?
> 
> http://mirrors.bieringer.de/Linux+IPv6-HOWTO/conf-ipv6-in-ipv4-point-to-point-tunnels.html
> (Section headings 9.3.1.1 & 9.3.1.2)
> http://seclists.org/lists/honeypots/2004/Jan-Mar/0209.html
> http://www.uwsg.iu.edu/hypermail/linux/kernel/0108.2/0485.html

These are deprecating the use of "ifconfig", not the use of
pseudo-interface names.  You can use pseudo-interface names with "ip":
	     ip addr add dev eth0 a.b.c.d/e label eth0:1

What's more, the author of the last of your references doesn't seem to
be aware that the labels aren't limited to numbers.  His remark about
the number of labels being limited to <10000 doesn't take into account
labels eth0:aaaa through eth0:ZZZZ.  Even that's not all; labels like
eth0:/^%# are allowed too.  I suspect non-printing characters will
work also, although I haven't tried any yet.

As additional icing on this "ip" cake, you can assign multiple IPs to
a single pseudo-interface label, making it possible to deal with
groups of IPs at once.

However, most people aren't dealing with ipv6-in-ipv4 tunnels,
honeypots, or thousands of IPs per interface, as are the references
you cite.  "ifconfig" will handle the vast majority of cases and is
simpler to use when the power of "ip" is not needed.

--
Dick St.Peters, stpeters@NetHeaven.com 


  reply	other threads:[~2004-06-23 20:30 UTC|newest]

Thread overview: 12+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2004-06-21  9:14 DNAT problem / question (nfcan: addressed to exclusive sender for this address) Arnauts, Bert
2004-06-21 16:45 ` Help with alias interfaces Erick Sanz
2004-06-21 17:11   ` Paweł Staszewski
2004-06-21 18:22     ` mlody
2004-06-21 18:44       ` Paweł Staszewski
2004-06-21 19:15         ` mlody
2004-06-23 15:31   ` Erick Sanz
2004-06-23 14:53     ` Antony Stone
2004-06-23 19:01       ` Dick St.Peters
2004-06-23 19:22         ` Antony Stone
2004-06-23 20:30           ` Dick St.Peters [this message]
2004-06-23 20:47             ` Antony Stone

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=16601.59510.845588.723249@saint.heaven.net \
    --to=stpeters@netheaven.com \
    --cc=netfilter@lists.netfilter.org \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox