Re: IP Alias with iptables

[Alistair Tonner <Alistair@nerdnet.ca>]

On April 19, 2004 03:25 pm, Antony Stone wrote:
> On Monday 19 April 2004 5:07 pm, Rodrigo Haces wrote:
> > > > I have only one network adapter in my Server, but i need to have 2
> > > > different networks, 192.168.1.0 to the MAC addresses i know and
> > > > 192.168.0.0 to the MAC addresses i don't know
> > >
< < Much snippage for brevity >>


> on which network range you want to do what.
>
> > > > if not, is there a way to create an eth0 and eth1 witn the same
> > > > adapter?
> > >
> > > No.   It's a simple (and cheap) job to add another ethernet card,
> > > though.
> >
> > No PCI slots available... :(
>
> I suggest another firewall then - trying to set up a firewall with only one
> ethernet interface is a poor enough solution (from a security point of
> view) in the first place, but if there is wireless access involved as well
> then I would not even consider it.
>
>
	Thanks Antony  -- again you have expressed precisely what I would have said 
-- succinctly and clearly.

	Aliased (stacked) interfaces ARE NOT SECURE.  Period.

	(And Hubs don't help)

	Alistair Tonner


 Regards,
>
> Antony.