Messages in this thread | | | Date | Wed, 22 Mar 2000 11:44:55 +1100 | From | Andre Pang <> | Subject | Re: Aliased Masqed Firewalled IP forwards |
| |
On Tue, Mar 21, 2000 at 08:11:38PM +0100, Jeroen Massar wrote:
> What doesn't: > - Outgoing connections for that specific IP over the specific alias. > > Question: > How do I do it, and even better CAN it be done? > The system currently runs a 2.2.13 kernel but another 2.2.x shouldn't > be a problem... 2.3 is too unstable at the moment though...
from http://members.home.net/ipmasq/ipmasq-HOWTO-1.82-7.html#ss7.24 :-
Users should also understand that IP Masquerading will only work out a physical interface such as eth0, eth1, etc. MASQing out an aliased interface such as "eth0:1, eth1:1, etc" will NOT work. In other words, the following WILL NOT WORK:
/sbin/ipfwadm -F -a m -W eth0:1 -S 192.168.0.0/24 -D 0.0.0.0/0 /sbin/ipchains -A forward -i eth0:1 -s 192.168.0.0/24 -j MASQ"
what you're looking for is something called 'static NAT'. netfilter (ie: the 2.3/2.4 kernels) support this, IIRC. unfortunately i don't think there's a solution for 2.2.x, unless somebody else interjects here..
-- : Andre Pang <andrep@vjolnir.org> - Purruna Pty Ltd - ph# 0411.882299 : : #ozone - http://www.vjolnir.org/ozone/ | trust in love to save :
- To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.rutgers.edu Please read the FAQ at http://www.tux.org/lkml/
| |