Re: IP Alias with iptables

[Michael Gale <michael.gale@utilitran.com>]

Hello,

	eth0:0 is an alias to eth0 -- so in iptables you must reference the interface
(eth0) and they also go by destination (-d) 

So in the following example:
eth0 = 192.168.0.1
eth0:0 = 10.10.0.1

iptables -A INPUT -i eth0 -d 192.168.0.1 -p tcp --dport 80 -j ACCEPT

will allow port 80 for the 192.168.0.1 network and

iptables -A INPUT -i eth0 -d 10.10.0.1 -p tcp --dport 25 -j ACCEPT 

will allow mail for the 10.10.0.1 network.

Michael.


On Mon, 19 Apr 2004 09:41:44 -0600
"Rodrigo Haces" <rhaces_chistes@yahoo.com.mx> wrote:

> Hi:
> 
> I have only one network adapter in my Server, but i need to have 2 different
> networks, 192.168.1.0 to the MAC addresses i know and 192.168.0.0 to the MAC
> addresses i dont't know, i have managed this by makin mi eth0 to 192.168.1.1
> and an alias eth0:0 to 192.168.0.1, everythings ok, but i'm also sharing
> internet, but when i start the rule to the eth0:0 it sends me an error. Is
> there a way to use IP Aliasing with iptables? if not, is there a way to
> create an eth0 and eth1 witn the same adapter?
> 
> Thanks
> 
> Rodrigo
> 
> 
> 
> 
> 
> 


-- 
Michael Gale
Network Administrator
Utilitran Corporation