* iptables with alias?
@ 2002-10-05 20:37 Jeppe Sørensen
2002-10-05 20:53 ` Antony Stone
0 siblings, 1 reply; 6+ messages in thread
From: Jeppe Sørensen @ 2002-10-05 20:37 UTC (permalink / raw)
To: netfilter
[-- Attachment #1: Type: text/plain, Size: 838 bytes --]
Hello
I have a little question that perhaps someone can help me with
I have a interface to the inet with 4 dynamic ip addr
eth0 = first dynamic ip addr
eth0:0 = second dynmaic ip addr
and so on
I want to make 1 on 1 nat on the frist 2 aliass and the last 2 alias are for the rest of the network
192.168.1.5 nat to eth0
192.168.1.6 nat to eth0:0
192.168.1.7-to-15 nat to eth0:1
192.168.1.16-to-30 nat to eth0:2
but iptables wan't take alias
What do I do / what can I do ?
I have looked in the The netfilter user mailinglist Archives and found the following solution
ip addr add w.x.y.z/bits dev eth0 label eth00
but how does I get it to work with dynamic address?
The archive mail I found the solution in
http://lists.netfilter.org/pipermail/netfilter/2002-June/034592.html
Jeppe Sorensen
Denmark
[-- Attachment #2: Type: text/html, Size: 2617 bytes --]
^ permalink raw reply [flat|nested] 6+ messages in thread
* Re: iptables with alias?
2002-10-05 20:37 iptables with alias? Jeppe Sørensen
@ 2002-10-05 20:53 ` Antony Stone
2002-10-05 21:52 ` Stewart Thompson
0 siblings, 1 reply; 6+ messages in thread
From: Antony Stone @ 2002-10-05 20:53 UTC (permalink / raw)
To: netfilter
On Saturday 05 October 2002 9:37 pm, Jeppe Sørensen wrote:
> Hello
>
> I have a little question that perhaps someone can help me with
>
> I have a interface to the inet with 4 dynamic ip addr
> eth0 = first dynamic ip addr
> eth0:0 = second dynmaic ip addr
> and so on
>
> I want to make 1 on 1 nat on the frist 2 aliass and the last 2 alias are
> for the rest of the network 192.168.1.5 nat to eth0
> 192.168.1.6 nat to eth0:0
> 192.168.1.7-to-15 nat to eth0:1
> 192.168.1.16-to-30 nat to eth0:2
You're right - netfilter doesn't accept : characters in interface names.
I suggest you create a script to (re)write appropriate SNAT rules, which is
called by dhcpcd, or whatever else you use to acquire your dynamic
addresses...
Antony.
--
The difference between theory and practice is that
in theory there is no difference, whereas in practice there is.
^ permalink raw reply [flat|nested] 6+ messages in thread
* RE: iptables with alias?
2002-10-05 20:53 ` Antony Stone
@ 2002-10-05 21:52 ` Stewart Thompson
2002-10-05 22:03 ` Trigger firewall Script on IP Change: Stewart Thompson
0 siblings, 1 reply; 6+ messages in thread
From: Stewart Thompson @ 2002-10-05 21:52 UTC (permalink / raw)
To: Antony Stone, netfilter
Hi Antony:
This just a test. My posts don't seem to be showing up on the list.
Regards,
Stu........
-----Original Message-----
From: netfilter-admin@lists.netfilter.org
[mailto:netfilter-admin@lists.netfilter.org]On Behalf Of Antony Stone
Sent: October 5, 2002 1:53 PM
To: netfilter@lists.netfilter.org
Subject: Re: iptables with alias?
On Saturday 05 October 2002 9:37 pm, Jeppe Sørensen wrote:
> Hello
>
> I have a little question that perhaps someone can help me with
>
> I have a interface to the inet with 4 dynamic ip addr
> eth0 = first dynamic ip addr
> eth0:0 = second dynmaic ip addr
> and so on
>
> I want to make 1 on 1 nat on the frist 2 aliass and the last 2 alias are
> for the rest of the network 192.168.1.5 nat to eth0
> 192.168.1.6 nat to eth0:0
> 192.168.1.7-to-15 nat to eth0:1
> 192.168.1.16-to-30 nat to eth0:2
You're right - netfilter doesn't accept : characters in interface names.
I suggest you create a script to (re)write appropriate SNAT rules, which is
called by dhcpcd, or whatever else you use to acquire your dynamic
addresses...
Antony.
--
The difference between theory and practice is that
in theory there is no difference, whereas in practice there is.
^ permalink raw reply [flat|nested] 6+ messages in thread
* Trigger firewall Script on IP Change:
2002-10-05 21:52 ` Stewart Thompson
@ 2002-10-05 22:03 ` Stewart Thompson
2002-10-05 22:38 ` Antony Stone
0 siblings, 1 reply; 6+ messages in thread
From: Stewart Thompson @ 2002-10-05 22:03 UTC (permalink / raw)
To: netfilter
Hi All:
Can anyone tell me how to automatically trigger
my firewall script to execute when the IP on the External
Interface changes. Thanks.
Stu.....
^ permalink raw reply [flat|nested] 6+ messages in thread
* Re: Trigger firewall Script on IP Change:
2002-10-05 22:03 ` Trigger firewall Script on IP Change: Stewart Thompson
@ 2002-10-05 22:38 ` Antony Stone
2002-10-05 22:53 ` Stewart Thompson
0 siblings, 1 reply; 6+ messages in thread
From: Antony Stone @ 2002-10-05 22:38 UTC (permalink / raw)
To: netfilter
On Saturday 05 October 2002 11:03 pm, Stewart Thompson wrote:
> Hi All:
>
> Can anyone tell me how to automatically trigger
> my firewall script to execute when the IP on the External
> Interface changes. Thanks.
If your external IP address is changing, you must be using DHCP...
If you're using ISCs dhcpcd, you can create scripts called
/etc/dhcpc/dhcpcd-<ifname>.exe where <ifname> is eth0, eth1, eth2 etc which
will get called whenever there's a new address on the interface.
man dhcpcd for a bit more info.
Antony.
--
I vote "no" to this proposal to form a committee to investigate whether we
should or should not hold a ballot on whether to vote yet.
^ permalink raw reply [flat|nested] 6+ messages in thread
* RE: Trigger firewall Script on IP Change:
2002-10-05 22:38 ` Antony Stone
@ 2002-10-05 22:53 ` Stewart Thompson
0 siblings, 0 replies; 6+ messages in thread
From: Stewart Thompson @ 2002-10-05 22:53 UTC (permalink / raw)
To: Antony Stone, netfilter
Hi Antony:
Thanks for the tip. I will have a look.
I new it was possible, I just wasn't sure how.
Regards,
Stu.......
-----Original Message-----
From: netfilter-admin@lists.netfilter.org
[mailto:netfilter-admin@lists.netfilter.org]On Behalf Of Antony Stone
Sent: October 5, 2002 3:39 PM
To: netfilter@lists.netfilter.org
Subject: Re: Trigger firewall Script on IP Change:
On Saturday 05 October 2002 11:03 pm, Stewart Thompson wrote:
> Hi All:
>
> Can anyone tell me how to automatically trigger
> my firewall script to execute when the IP on the External
> Interface changes. Thanks.
If your external IP address is changing, you must be using DHCP...
If you're using ISCs dhcpcd, you can create scripts called
/etc/dhcpc/dhcpcd-<ifname>.exe where <ifname> is eth0, eth1, eth2 etc which
will get called whenever there's a new address on the interface.
man dhcpcd for a bit more info.
Antony.
--
I vote "no" to this proposal to form a committee to investigate whether we
should or should not hold a ballot on whether to vote yet.
^ permalink raw reply [flat|nested] 6+ messages in thread
end of thread, other threads:[~2002-10-05 22:53 UTC | newest]
Thread overview: 6+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2002-10-05 20:37 iptables with alias? Jeppe Sørensen
2002-10-05 20:53 ` Antony Stone
2002-10-05 21:52 ` Stewart Thompson
2002-10-05 22:03 ` Trigger firewall Script on IP Change: Stewart Thompson
2002-10-05 22:38 ` Antony Stone
2002-10-05 22:53 ` Stewart Thompson
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox