lkml.org 
[lkml]   [2000]   [Mar]   [22]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
/
Date
From
SubjectRe: Aliased Masqed Firewalled IP forwards
On Tue, Mar 21, 2000 at 08:11:38PM +0100, Jeroen Massar wrote:

> What doesn't:
> - Outgoing connections for that specific IP over the specific alias.
>
> Question:
> How do I do it, and even better CAN it be done?
> The system currently runs a 2.2.13 kernel but another 2.2.x shouldn't
> be a problem... 2.3 is too unstable at the moment though...

from http://members.home.net/ipmasq/ipmasq-HOWTO-1.82-7.html#ss7.24 :-

Users should also understand that IP Masquerading will only work out a
physical interface such as eth0, eth1, etc. MASQing out an aliased interface
such as "eth0:1, eth1:1, etc" will NOT work. In other words, the following
WILL NOT WORK:

/sbin/ipfwadm -F -a m -W eth0:1 -S 192.168.0.0/24 -D 0.0.0.0/0
/sbin/ipchains -A forward -i eth0:1 -s 192.168.0.0/24 -j MASQ"

what you're looking for is something called 'static NAT'. netfilter
(ie: the 2.3/2.4 kernels) support this, IIRC. unfortunately i don't think
there's a solution for 2.2.x, unless somebody else interjects here..


--
: Andre Pang <andrep@vjolnir.org> - Purruna Pty Ltd - ph# 0411.882299 :
: #ozone - http://www.vjolnir.org/ozone/ | trust in love to save :

-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.rutgers.edu
Please read the FAQ at http://www.tux.org/lkml/

\
 
 \ /
  Last update: 2005-03-22 13:57    [W:0.204 / U:0.008 seconds]
©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site