Re: MASQ problem

[Pascal Italiaander <pc-secure@home.nl>]

Op dinsdag 10 juni 2003 06:30, schreef B H R Balaji:
> HI
>
> i have 20 alias interface, iam not able to MASQ using that interface, is
> this iptables supports this option
>
> [root@netxpress root]# iptables -I FORWARD -i eth0:1  -s
> 92.168.100.0/24  -j MASQUERADE
> Warning: wierd character in interface `eth0:1' (No aliases, :, ! or *).
> iptables: Target problem
>
>
> hare

hello

first of all:
Masquerading is done on the POSTROUTING chain.    NOT on the FORWARD chain.

interface_alias in that form is not allowed ,however , you could extract the  
ip_address and use that instead        like;

EXT_IF #external interface
ETH0_1_IP="`/sbin/ifconfig eth0:1 | grep 'inet addr' | awk '{print $2}' | sed 
-e 's/.*://'`"  

 iptables -I POSTROUTING -i eth0:1  -s  92.168.100.0/24  -o $ETH0_1_IP -j 
MASQUERADE

Watch the syntax 
I have used " -o OUT ETH0_1_IP " and not  " -i  ETH0_1_IP"  this is relevant.

Pascal