On Thu, 13 Sep 2001 14:33:28 -0400
"Jonathan B. Bayer" <[EMAIL PROTECTED]> wrote:

> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
> 
> Hello ,
> 
> I'm trying to set up a firewall for my office using iptables.  The system is a 
>RedHat 7.1
> installation with all the latest updates.
> 
> Once of the things we have here is that the external NIC (eth0) supports 4 IP 
>addresses.
> The internal network is a 192.168.1. subnet.
> 
> I'm trying to get this system to route packets going to one of the virtual IPs to 
>one of
> internal system.  But I can't figure out how.  When I try the command, iptables 
>rejects
> the virtual interface (see the output below).
> 
> Any help would be appreciated.


Hey, JBB. First of all, go here to see a set of nicely documented iptables firewall 
rules:

http://email.riverdale.k12.or.us/mailarchives/k12linux/1605.html

Note how he has defined his eth interfaces in the "Define additional inside devices" 
section. I suggest
just defining your eth0:0, etc. aliases as LAN_DEV_2="eth0:0" etc., then issuing calls 
to LANDEV_2 rather than eth0:0. It could be a limitation of how iptables parses the 
rules. Note that the recently released iptables 1.2.3 contacined a fix so that 
iptables-save/restore could properly handle an eth+
declaration.

jb



_______________________________________________
Seawolf-list mailing list
[EMAIL PROTECTED]
https://listman.redhat.com/mailman/listinfo/seawolf-list

Reply via email to