Re: not [!] rule is not working

[Grant Taylor <gtaylor@riverviewtech.net>]

On 08/17/07 03:09, pankaj jain wrote:
> do these rules apply for logical interfaces also?

Logical as in aliased interfaces or logical as in VLAN interfaces?  I
don't _think_ they apply to aliased interfaces other than the fact that
the IP(s) will be different.  VLANs will need their own rules though as
they are a pseudo physical interface.

> because in my actual case I would be having 127.x.x.x ips on my 
> physical interfaces and actual ips on logical interfaces. for 
> example:
> 
> eth0 - 127.2.3.4
> eth0:0 - 10.19.0.102

Um, be careful using 127.x.y.z/8 on any thing other than the loop back
as I think there are hard coded filters in the kernel to protect the
loop back.  I don't know if it is to protect the IP range or the subnet
that is assigned to the loop back interface.  Just be aware....

> is there any command which can turn on these flags permanently such
> that I dont have to do it on every reboot of the machine?

Um, there are some config files on some distros that have this option
per say.  Rather that is to say that they read the file and set the
parameters on boot on your behalf.  As far as how to set them and not
have them be set on boot, I'm sure you could modify the kernel source.



Grant. . . .