Yes...  Anybody on the outside world can get directly to any machine on your
LAN.

> -----Original Message-----
> From: UK Jaiswal [SMTP:[EMAIL PROTECTED]]
> Sent: Friday, September 08, 2000 9:09 AM
> To:   [EMAIL PROTECTED]
> Subject:      Re: Urgent: Masquerading
> 
> Hi,
> 
> I have finally done it with just one NIC. eth0 has the private IP and
> eth0:0 has the public IP. But is this a security lapse and can somebody
> exploit it?
> 
> Thankyou.
> Uk
> 
> 
> John Aldrich wrote:
> > 
> > On Thu, 07 Sep 2000, Mikkel L. Ellertson wrote:
> > > On Thu, 7 Sep 2000, John Aldrich wrote:
> > >
> > > > On Thu, 07 Sep 2000, UK Jaiswal wrote:
> > > > > Hi friends,
> > > > [major snippage]
> > > > > # Will it be possible to go ahead with IP masquerading without
> > > > > installing a second NIC (by doing network aliasing on one NIC) on
> the
> > > > > Gateway Linux machine and without adding another HUB?
> > > > >
> > > > I don't believe so. In any configuration I can think of, you'd need
> > > > at least two nics in one of the linux boxes.
> > > >     John
> > > >
> > > You should be able to do it with one NIC and IP aliasing.  It will not
> be
> > > too secure, but it should work.  Your rules will have to be IP bassed.
> > >
> > Yes, but you'll still be "leaking" private IPs into "public" IP space
> > which, IIRC, is a BIG no-no!
> >         John
> > 
> > _______________________________________________
> > Redhat-list mailing list
> > [EMAIL PROTECTED]
> > https://listman.redhat.com/mailman/listinfo/redhat-list
> 
> 
> 
> _______________________________________________
> Redhat-list mailing list
> [EMAIL PROTECTED]
> https://listman.redhat.com/mailman/listinfo/redhat-list



_______________________________________________
Redhat-list mailing list
[EMAIL PROTECTED]
https://listman.redhat.com/mailman/listinfo/redhat-list

Reply via email to